No domestic primary official source retrieved yet. None of the sources retrieved for this jurisdiction is the official instrument or regulator publication itself (tier 1). No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Latin America LATAM

Domains covered
8 of 8
Sources
139
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Mixed — Grey-Listed Constituents (Bolivia, Haiti, Venezuela) Alongside Largely-Compliant Regional Economies (Brazil, Mexico, Argentina, Chile, Colombia, Peru) Tier: B Risk direction: Increasing Enablement vs enforcement: Mixed

GAFILAT (FATF-style regional body) coordinates AML/CFT/CPF standards across ~17 member states with sharply uneven implementation.

MoreBolivia, Haiti and Venezuela remain on the FATF grey list; Panama, Jamaica and others exited the EU/FATF lists 2023-2025. Brazil and Argentina are advancing crypto-asset and BO reforms; Venezuela shows state-linked TF/NPO-oversight and BO deficiencies.

Key deficiencies
  • Venezuela: NPO-sector oversight inconsistent with FATF Recommendation 8 risk-based approach
  • Bolivia: unsanctioned beneficial-ownership breaches and weak risk-based DNFBP supervision
  • Haiti: BO information not consistently accessible in a timely manner; targeted financial sanctions gaps
  • Tri-Border Area (Argentina/Brazil/Paraguay): reactive-only TF investigations, no TF convictions despite exposure
  • Regionwide: complicit professional/broker networks (oil brokers, exchange operators) enabling cartel and sanctions-adjacent laundering
Recent developments (18m)
  • Bolivia added to FATF grey list (June 2025) and remains listed as of June 2026 Plenary
  • Venezuela added to EU high-risk third-country list (Delegated Regulation (EU) 2025/1184, June 2025)
  • OFAC E.O. 14373 'Safeguarding Venezuelan Oil Revenue' (Jan 2026) triggered a wave of new/amended Venezuela General Licenses reopening oil, gas, mineral and petrochemical trade
  • OFAC designated Tren de Aragua money-laundering network (Dec 2025) and top TdA leadership (July 2025); Cartel de los Soles designated (July 2025)
  • FinCEN/OFAC issued and escalated alerts on Mexican-cartel (CJNG/Sinaloa) crude-oil and fuel-smuggling TBML schemes (May 2025, supplemental June 2026)
  • Brazil stood up a new VASP authorization regime (BCB) with reporting live May 2026 and licensing deadline Oct 2026; OFAC designated PCC operatives for crypto-enabled laundering (July 2026)
Brief

Lead signal

Lead Signal

Latin America's financial integrity picture this cycle is defined by a structural supervisory expansion in Brazil rather than by any single enforcement incident. From 30 October 2026, incumbent virtual asset service providers operating in Brazil were required to have filed phase-one authorisation applications with the Banco Central do Brasil, and from 6 November 2026 BCB-supervised banks and payment institutions are barred from dealing with unauthorised virtual asset service providers. Taken together, these two dates bring the largest crypto market in Latin America under full central-bank anti-money-laundering supervision for the first time, converting what had been a permissive, lightly supervised space into one where banking-sector counterparties face a hard compliance cut-off for dealing with unlicensed platforms. The underlying BCB resolutions were not directly retrieved this cycle, so the finding is carried at a qualified level of confidence pending a primary regulatory anchor, but convergent commentary describes the mechanism consistently: a 270-day filing window culminating in the authorisation deadline, followed shortly afterward by the counterparty prohibition taking effect.

Read full brief

Lead Signal

Latin America's financial integrity picture this cycle is defined by a structural supervisory expansion in Brazil rather than by any single enforcement incident. From 30 October 2026, incumbent virtual asset service providers operating in Brazil were required to have filed phase-one authorisation applications with the Banco Central do Brasil, and from 6 November 2026 BCB-supervised banks and payment institutions are barred from dealing with unauthorised virtual asset service providers. Taken together, these two dates bring the largest crypto market in Latin America under full central-bank anti-money-laundering supervision for the first time, converting what had been a permissive, lightly supervised space into one where banking-sector counterparties face a hard compliance cut-off for dealing with unlicensed platforms. The underlying BCB resolutions were not directly retrieved this cycle, so the finding is carried at a qualified level of confidence pending a primary regulatory anchor, but convergent commentary describes the mechanism consistently: a 270-day filing window culminating in the authorisation deadline, followed shortly afterward by the counterparty prohibition taking effect.

In parallel, the Financial Action Task Force adopted the first full mutual evaluation of Mexico since 2018 at its 28-30 October 2026 Plenary, conducted under the 2022 effectiveness methodology. Detailed ratings have not yet been published, so the substantive findings of that evaluation are not yet knowable, but the act of adoption itself is a structural event: it resets the clock on Mexico's formal standing within the global anti-money-laundering architecture and will shape the technical compliance and effectiveness ratings that follow.

Other Developments

Grey list movement excludes the region. The FATF Plenary removed Bulgaria, Cote d'Ivoire, the Democratic Republic of Congo and Monaco from increased monitoring, narrowing the list from twenty-two to eighteen jurisdictions with no additions. None of the four removed jurisdictions are members of the Financial Action Task Force of Latin America, known as GAFILAT, so the regional grey-list population is unchanged this cycle even as the global list moved.

GAFILAT membership scope stands as baseline. The Financial Action Task Force of Latin America continues to bring together eighteen countries spanning South, Central and North America, a standing anchor against which Mexico's mutual evaluation and any future regional listing decisions should be read.

Cross-Monitor Connections

The Brazilian central bank's move to supervise virtual asset service providers and cut off unauthorised counterparties has a direct bearing on the digital-asset architecture questions tracked under crypto-infrastructure monitoring, since the authorisation and banking-prohibition mechanism effectively redraws which platforms can access the regulated financial system. It also touches state-capture and governance monitoring to the extent that the credibility of Brazil's enforcement of the 6 November cut-off, rather than the existence of the rule on paper, will determine whether the enablement gap that previously existed in the Brazilian market actually closes.

Outlook

The near-term question for Brazil is one of enforcement credibility rather than rulemaking: whether BCB-supervised banks visibly and consistently decline to process transactions for unauthorised platforms once the 6 November 2026 prohibition is in force, and whether a primary-source anchor to the underlying resolutions becomes available to firm up the current qualified confidence rating. For Mexico, attention shifts to the publication of detailed mutual evaluation ratings, which will determine whether the adopted report reads as a structural compliance improvement since 2018 or exposes continuing effectiveness gaps under the stricter 2022 methodology. Neither development is itself a listing action, but both carry the structural weight to influence future GAFILAT and FATF decisions concerning the region.

Earlier periodic briefs (5)
4 Nov 2026 · fim-2026-11-04

Lead Signal

Latin America's financial integrity picture is defined by a structural supervisory expansion in Brazil rather than by any single enforcement incident. From 30 October 2026, incumbent virtual asset service providers operating in Brazil were required to have filed phase-one authorisation applications with the Banco Central do Brasil, and from 6 November 2026 BCB-supervised banks and payment institutions are barred from dealing with unauthorised virtual asset service providers. Taken together, these two dates bring the largest crypto market in Latin America under full central-bank anti-money-laundering supervision for the first time, converting what had been a permissive, lightly supervised space into one where banking-sector counterparties face a hard compliance cut-off for dealing with unlicensed platforms. The underlying BCB resolutions were not directly retrieved, so the finding is carried at a qualified level of confidence pending a primary regulatory anchor, but convergent commentary describes the mechanism consistently: a 270-day filing window culminating in the authorisation deadline, followed shortly afterward by the counterparty prohibition taking effect.

In parallel, the Financial Action Task Force adopted the first full mutual evaluation of Mexico since 2018 at its 28-30 October 2026 Plenary, conducted under the 2022 effectiveness methodology. Detailed ratings have not yet been published, so the substantive findings of that evaluation are not yet knowable, but the act of adoption itself is a structural event: it resets the clock on Mexico's formal standing within the global anti-money-laundering architecture and will shape the technical compliance and effectiveness ratings that follow.

Other Developments

Grey list movement excludes the region. The FATF Plenary removed Bulgaria, Cote d'Ivoire, the Democratic Republic of Congo and Monaco from increased monitoring, narrowing the list from twenty-two to eighteen jurisdictions with no additions. None of the four removed jurisdictions are members of the Financial Action Task Force of Latin America, known as GAFILAT, so the regional grey-list population is unchanged even as the global list moved.

GAFILAT membership scope stands as baseline. The Financial Action Task Force of Latin America continues to bring together eighteen countries spanning South, Central and North America, a standing anchor against which Mexico's mutual evaluation and any future regional listing decisions should be read.

Cross-Monitor Connections

The Brazilian central bank's move to supervise virtual asset service providers and cut off unauthorised counterparties has a direct bearing on the digital-asset architecture questions tracked under crypto-infrastructure monitoring, since the authorisation and banking-prohibition mechanism effectively redraws which platforms can access the regulated financial system. It also touches state-capture and governance monitoring to the extent that the credibility of Brazil's enforcement of the 6 November cut-off, rather than the existence of the rule on paper, will determine whether the enablement gap that previously existed in the Brazilian market actually closes.

Outlook

The near-term question for Brazil is one of enforcement credibility rather than rulemaking: whether BCB-supervised banks visibly and consistently decline to process transactions for unauthorised platforms once the 6 November 2026 prohibition is in force, and whether a primary-source anchor to the underlying resolutions becomes available to firm up the current qualified confidence rating. For Mexico, attention shifts to the publication of detailed mutual evaluation ratings, which will determine whether the adopted report reads as a structural compliance improvement since 2018 or exposes continuing effectiveness gaps under the stricter 2022 methodology. Neither development is itself a listing action, but both carry the structural weight to influence future GAFILAT and FATF decisions concerning the region.

3 Nov 2026 · fim-2026-11-01

Lead Signal

Latin America's anti-money-laundering architecture moved from framework-building toward effectiveness-testing, anchored by two developments in the region's largest economies. The FATF Plenary, meeting 28-30 October 2026, adopted the FATF-GAFILAT mutual evaluation report of Mexico, the first full assessment since 2018 and the first conducted under the 2022 effectiveness-weighted methodology. Detailed ratings have not yet been published, but the adoption itself is confirmed and marks a structural inflection: Mexico's prior evaluation cycle predates the current emphasis on demonstrated outcomes over paper compliance, and this reassessment will test whether the sectors Mexico's own national risk assessment has flagged as priority high-risk - virtual-asset service providers, remittance channels, gaming, real estate and notarial services - have closed the gaps identified eight years ago.

Separately, and on a parallel but distinct track, Brazil's central bank deadline for virtual-asset service provider authorisation fell due on 30 October 2026, with a banking-counterparty prohibition taking effect shortly after. Incumbent VASPs operating in Brazil as of 2 February 2026 were required to file phase-one authorisation applications with the Banco Central do Brasil within a 270-day window closing on that date. From early November 2026, BCB-supervised banks and payment institutions are barred from dealing with VASPs that have not secured authorisation. Together, these two developments bring formal AML and sanctions supervision to bear on the region's largest crypto market for the first time, while simultaneously testing the effectiveness of its largest jurisdiction's existing AML regime against a tougher evaluative standard.

11 Oct 2026 · fim-2026-10-11

Lead Signal

The LATAM financial-integrity picture this cycle is defined by convergent national tightening across sanctions, crypto gatekeeping and AML-aligned supervisory moves, with no corresponding bloc-wide instrument underpinning any of it. On 1 October 2026, OFAC designated an individual bearing CURP BUMR821228HBCNRF02 under Executive Order 13224, as amended, and Executive Order 14059, for providing financial, material and technological support to the Sinaloa Cartel; the action was published in the Federal Register on 6 October 2026. This is a confirmed, primary-sourced designation, standing in contrast to unresolved reporting from Colombia, where local coverage on 3 October 2026 suggested possible further US Treasury action against figures connected to then-President Gustavo Petro, a claim that remains unconfirmed by any US agency. Underlying that reporting is a confirmed prior designation: OFAC sanctioned then-President Petro, his wife, his son and the then-Interior Minister under EO 14059 on 24 October 2025. The separation between what is confirmed (the 2025 designation, the 1 October 2026 Sinaloa-linked action) and what remains uncertain (further 2026 action against the Petro family) is the key discipline for reading this cycle's sanctions signal.

Other Developments

Mexico's fifth-round FATF mutual evaluation approaches a decision point. The onsite period for Mexico's evaluation occurred in February 2026, with a possible Plenary discussion in the fourth quarter of 2026 under FATF's own published calendar. Mexico's prior, 2018 evaluation placed it under enhanced follow-up, and the outcome of the current round carries direct grey-list risk implications; this is a scheduling fact confirmed via FATF's own materials, though the framing of grey-listing risk itself rests on secondary commentary.

Argentina has moved its virtual-asset-service-provider registry toward a substantive gatekeeping standard. CNV General Resolution 1139/2026 confirms that access to the PSAV Registry now depends on an integrity and solvency assessment of the applicant, its directors and its beneficial owners, rather than automatic filing acceptance -- a change relevant to FATF Recommendation 15 on virtual-asset service providers.

Brazil has set a banking-access cut-off for unauthorised virtual-asset service providers. Under BCB Resolutions 519, 520 and 521 (2025) and Law 14,478/2022, existing VASPs must file authorisation requests by 30 October 2026; from that date, BCB-authorised banks and payment institutions may not transact with unauthorised VASPs. Stablecoin transfers are separately treated as foreign-exchange operations, capped at US$100,000 per transaction, with monthly reporting that has been in force since 4 May 2026.

Curaçao's gambling-sector AML supervision has been operationalised in practice. Under the National Ordinance on Games of Chance (LOK), licensees are now subject to a dedicated compliance-officer requirement, an AML/CFT programme aligned to FIU Curaçao, and unusual-transaction reporting through goAML under the NORUT ordinance; crypto-facilitating operators face on-chain transaction-monitoring expectations, and platforms accepting anonymous crypto face rejection. This is a genuine, if still commentary-sourced, reduction in the permissiveness of a historically lightly-supervised licensing hub.

Cross-Monitor Connections

The Brazilian and Argentine VASP-gatekeeping developments described above are tracked in parallel by the crypto monitor's licensing and stablecoin-regime modules, which examine the same underlying BCB and CNV instruments from a market-access and product-classification angle rather than an AML/CFT angle; the two readings are complementary rather than duplicative. The Curaçao AML-supervision operationalisation also connects to gambling-regulatory tracking of Curaçao's parallel transition to direct CGA licensing, where the physical-presence requirement and the AML-programme requirement are both part of the same broader tightening of what had been a permissive licensing node.

Outlook

The clearest near-term date is 30 October 2026, when Brazil's VASP authorisation deadline takes effect and unauthorised exchanges lose banking access; market consolidation ahead of that deadline is already visible. Mexico's possible Q4 2026 FATF Plenary discussion is the second major date to watch, with a confirmed grey-list risk dimension depending on the ratings Mexico receives. The unresolved status of further US Treasury action against Colombian figures connected to President Petro remains a reporting thread to monitor rather than a confirmed development.

5 Sep 2026 · fim-2026-08-21

Lead Signal

Brazil, through its central bank, has restructured cross-border payment settlement rules to exclude stablecoins and crypto assets from a key regulated channel. BCB Resolution 561 bars electronic FX providers from using stablecoins or crypto to settle the offshore leg of regulated cross-border payments, effective 1 October 2026, and pairs the restriction with new segregated client account requirements, monthly FX reporting, and ten year record retention. The measure is explicitly framed by the central bank around illicit finance traceability, and it sits alongside a parallel authorization regime under BCB Resolutions 519 through 521 of 2025, in force since 2 February 2026, requiring virtual asset service providers to obtain SPSAV authorization by 30 October 2026 or lose access to the banking system. Taken together, the central bank has consolidated a bank style, centrally supervised virtual asset perimeter that this monitor assesses as reducing Brazil illicit finance risk via crypto rails.

Other Developments

Bank style supervision consolidates. The SPSAV authorization category brings compliance obligations to virtual asset service providers, and OECD Crypto Asset Reporting Framework reporting through the DeCripto system begins in July 2026. A hard access cutoff, not a graduated penalty. Providers that fail to secure authorization by 30 October 2026 lose direct access to the banking system, an architecture over incident signal this monitor prioritizes because it reshapes the population of market participants regardless of whether any individual firm is investigated. Jurisdiction risk assessed as decreasing. This monitor assesses Brazil jurisdiction risk direction as decreasing this cycle specifically on the crypto rail dimension, reflecting the consolidation of bank style VASP supervision together with the new cross-border settlement restriction, which together reduce illicit finance optionality via crypto rails. A regional coverage gap persists. No LATAM jurisdiction beyond Brazil produced comparable material this cycle within this monitor evidence base.

Cross-Monitor Connections

This cycle Brazilian development sits at the intersection of financial integrity, payments, and crypto regulatory analysis, with the same underlying BCB resolutions read through each monitor own lens. The world payments monitor covers the licensing and market access dimension of Resolution 561 under its own module spine, and the crypto monitor covers the stablecoin regime dimension of the same resolution under its own module spine. This monitor focus remains the illicit finance traceability rationale the central bank has attached to the restriction, distinct from either of those readings.

Outlook

Two implementation dates anchor the near term watch list: the 1 October 2026 effective date for the Resolution 561 stablecoin settlement restriction, and the 30 October 2026 deadline for virtual asset providers to secure SPSAV authorization or lose banking access. DeCripto reporting, already underway since July 2026, will generate an ongoing stream of data that may surface additional illicit finance signal in coming cycles. The sourcing base for this cycle findings remains tier three and tier four secondary press rather than a directly retrieved tier one BCB gazette text, and a stronger primary source confirmation of Resolutions 519 through 521 and 561 should be treated as an open item for the next research cycle. Whether comparable crypto specific supervisory frameworks emerge elsewhere in the LATAM bloc, where none has been identified this cycle within this monitor evidence base, is a structural gap worth continued tracking.

11 Aug 2026 · fim-2026-08-05

Lead Signal

Venezuela's sanctions architecture has survived the change in the country's political leadership largely intact. Following Nicolas Maduro's capture on January 3, 2026, the Government of Venezuela, PdVSA, and Minerven remain blocked under the U.S. sanctions program; no Venezuela-related executive order has been revoked, and relief is being administered instead through revocable general licences rather than through any dismantling of the underlying legal architecture. This is an assessed judgment, corroborated across several tier-four legal-alert sources and a tier-one Congressional Research Service product, though no single tier-one OFAC statement was retrieved this cycle confirming the full post-capture policy posture. The pattern nonetheless points toward architecture preservation, not architecture retirement, as the operative U.S. posture toward a country in political transition.

That posture is reinforced by continuing enforcement activity. OFAC designated four Venezuela oil-sector companies and four shadow-fleet tankers as blocked property, citing the Maduro regime's dependence on a global vessel network to facilitate sanctionable oil-revenue activity. Read together, the general-licence relief mechanism and the shadow-fleet designation programme point toward a deliberate strategy of retaining maximum leverage over Venezuela's political trajectory rather than moving to a post-sanctions footing.

Other Developments

Mexican cartel finance has diversified beyond the drug-proceeds laundering typology that has historically defined enforcement attention. FinCEN issued a supplemental alert on fiscal fuel-theft and tax-evasion schemes on June 30, 2026, alongside an OFAC designation of two Mexican nationals and nine entities tied to a CJNG fuel-smuggling network. Weeks earlier, on April 14, 2026, OFAC designated six targets, including Casino Centenario, Diamante Casino, and a facilitating attorney, tied to a money-laundering and cash-smuggling enterprise operated by Cartel del Noreste. Separately, Chinese money-laundering organizations have been documented extending underground-banking services to Mexico-based cartels beyond the consumer-goods trade-laundering role for which they are best known, moving into more direct placement via financial institutions and real estate — an assessed rather than confirmed finding given reliance on a single tier-four synthesis corroborated by a primary FinCEN typology document.

Brazil's central bank has closed the region's largest unregulated virtual-asset perimeter. Banco Central do Brasil Resolutions 519, 520 and 521 took effect on February 2, 2026, establishing a comprehensive VASP authorization regime covering capital, AML/CFT and FX-integration obligations, with a 270-day transition to October 30, 2026. This high-confidence, tier-one finding is explicitly framed against the FATF Recommendation 15 standard.

Argentina and Mexico are formalizing crypto-adjacent frameworks in parallel, though from materially weaker starting points. Argentina's central bank is understood to be finalizing a framework, targeted for April 2026, permitting licensed banks to offer custody, trading and payment services in bitcoin, ether, USDC and USDT, reversing the May 2022 prohibition. In Mexico, a Senate bill known as the Murat Initiative, introduced in May 2026, would restrict stablecoin issuance to authorized IFPEs and banks and criminalize unauthorized issuance — pending legislation sourced to a single tier-four reference, not yet corroborated by a primary Mexican legislative or Banxico source.

Cross-Monitor Connections

The Venezuela and Mexico findings both carry conflict-finance and extractive-industry dimensions intersecting with SCEM/ERM tracking of oil-revenue and commodity-linked illicit flows: PdVSA's oil-sector sanctions and the shadow-fleet designation programme sustain Venezuela's illicit oil-revenue architecture, while Mexican fuel theft is now characterized as cartels' most significant non-drug revenue source. On digital assets, Brazil's VASP authorization regime is the same underlying development the World Payments Monitor tracks from a licensing and market-access lens — FIM's interest is the AML/CFT and FATF-alignment architecture, not payments-market structure.

Outlook

The near-term calendar is anchored by Brazil's October 30, 2026 VASP compliance deadline, which will test whether the region's largest virtual-asset market can absorb a genuine capital-adequacy and audit-based licensing regime without significant market exit. Argentina's bank-crypto framework and Mexico's stablecoin bill remain contingent on regulatory and legislative finalization respectively, and both illustrate a liberalization-ahead-of-supervision dynamic worth monitoring. Venezuela's transitional environment remains volatile by design: general-licence-based relief can be amended without legislative action, and the underlying architecture gives Washington continued leverage over any successor government's conduct.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions

The sanctions architecture relevant to Colombia this cycle is defined by continuity, not by a new act. A Presidential Notice dated 15 October 2026 continues in effect, beyond 21 October 2026, the national emergency originally declared under Executive Order 12978 in 1995 with respect to significant narcotics traffickers centered in Colombia. This is a thirty-one-year-old instrument being renewed again, and its persistence is itself the analytically significant fact: US autonomous sanctions and emergency-powers architecture operates on its own institutional clock, independent of the multilateral technical-compliance assessment that the Financial Action Task Force applies to the same jurisdiction. Colombia is not currently grey-listed or black-listed by the FATF, as confirmed by the FATF's own 19 June 2026 Plenary list, and the October 2026 Plenary outcome, which would be the next point at which that status could change, had not been published as of this research cycle.

Continue reading

Running in parallel with the IEEPA continuation is Colombia's reported designation as a major drug-producing and drug-transit country under the Foreign Relations Authorization Act review process, reported by trade press as the first such designation in roughly three decades. Taken together, these two threads describe a sanctions-architecture divergence: a jurisdiction judged compliant or improving on FATF's own technical-compliance ratings while remaining subject to, and in one respect newly subject to, the harder edges of US unilateral authority. For institutions whose Colombia risk calibration leans on FATF status as a proxy for overall exposure, this divergence is the structural point to carry forward — FATF's list is necessary but not sufficient evidence of the full sanctions-exposure picture for a counterparty or corridor with Colombian nexus.

No new asset freezes, designations of specific persons or entities, or sectoral restrictions accompanied the continuation notice; it is a renewal of existing emergency powers rather than an escalation of their scope. The practical implication for screening functions is unchanged obligations rather than new ones, but the renewal itself is the signal that this architecture is not expected to lapse in the near term.

Outlook

The next marker is the October 2026 FATF Plenary outcome, which will either confirm Colombia's continued non-listed status or introduce a change; either outcome would need to be read against the now-continued IEEPA emergency rather than in isolation. Institutions with Colombian exposure should expect the US autonomous sanctions architecture to remain the more conservative and more durable reference point regardless of how the FATF list moves, given the emergency's three-decade continuous history.

Judgment: No LATAM-specific sanctions-evasion development identified this cycle. Uncertain
Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

This cycle establishes the first LATAM-bloc D1 baseline for the Financial Integrity Monitor, and the picture it opens with is unusual: a jurisdiction, Venezuela, moving simultaneously toward liberalisation on one sanctions axis and toward restriction on two others. Executive Order 14373 (9 January 2026) created a Foreign Government Deposit Funds mechanism that cascaded into a series of General Licenses, the GL46-52 series plus GL30B, GL48B and GL49A, reopening Venezuelan oil, gas, mineral and petrochemical trade through licensed and authorized channels. Read as architecture rather than incident, this is a redesign of the conduit through which Venezuelan state oil revenue reaches the international financial system, not a one-off licence grant, and it diverges sharply from a static or hardening posture elsewhere. The European Commission simultaneously added Venezuela to its high-risk third-country list (Delegated Regulation (EU) 2025/1184), and HM Treasury June 2026 Advisory Notice under Money Laundering Regulation 33 lists Venezuela, together with Bolivia and Haiti, as High-Risk Third Countries requiring enhanced due diligence, a wider scope than the EU list carries. For banks, payment companies and cross-sector firms operating across the US, EU and UK regimes, the resulting compliance friction is the structural unit of analysis this baseline establishes: a licensing regime opening while due-diligence regimes tighten, on the identical underlying jurisdiction, inside an eighteen-month window.

That divergence sits alongside a further procedural shift inside the UK own architecture: from 28 January 2026 the Office of Financial Sanctions Implementation retired its separate Consolidated List in favor of a single UK Sanctions List, adding a further point of structural divergence between UK, EU and US list architectures that firms must reconcile when mapping screening obligations across regimes. None of these three developments, the US liberalisation, the EU/UK restriction, and the UK list consolidation, are best read in isolation; together they define a live case study in how three closely aligned regulatory blocs can pull apart in real time on the same country.

The grey-list dimension of this baseline reinforces a picture of structural capacity deficit rather than acute new risk. Bolivia, grey-listed since June 2025, and Venezuela, grey-listed since June 2024, remain under FATF increased monitoring as of the 19 June 2026 Plenary, with unresolved deficiencies across special investigative techniques, DNFBP risk-based supervision, beneficial-ownership breach sanctioning and money-laundering prosecutions. Haiti, grey-listed since June 2021 with expired action-plan deadlines, represents the clearest capacity-deficit signal anywhere in the bloc, a five-year unresolved listing that this baseline treats as evidence of durable institutional constraint rather than a temporary lapse. Venezuela carries an additional and analytically distinct finding worth folding into this baseline: FATF 2024 assessment of its non-profit-organisation legal framework found oversight potentially disrupting legitimate civil-society activity while failing to target genuine terrorism-financing risk, a dual failure that resonates with the state-capture pattern this cycle also surfaces through the Cartel de los Soles designation, in which the boundary between state authority and criminal enterprise has visibly blurred.

The enforcement dimension of this baseline is anchored by OFAC December 2025 designation naming individuals and a Bogota-based entertainment company as SDGT/TCO actors for Tren de Aragua money-laundering operations. The lasting analytical value of this action is not the designation itself but the front-company layer it exposes, an ordinary commercial entity used to move and layer criminal proceeds across a border, a model that outlasts any single set of individual designations and is likely to recur under different corporate names.

As a state-of-the-domain synthesis, this baseline establishes LATAM D1 as a bloc where sanctions architecture is actively bifurcating on its most consequential node, Venezuela, while its weakest-capacity states, Bolivia and Haiti, remain structurally stalled. The next material test of this baseline arrives at the FATF October 2026 Plenary and the associated EU review clause on Venezuela status, both of which will determine whether this cycle divergence widens further or begins to resolve.

domain_sub_briefs · D1 · Cumulative analysis
Standing baseline position

Venezuelan sanctions architecture now formally extends to the state apparatus itself via the SDGT designation of the Maduro-headed Cartel de los Soles, tying narco-terrorism financing to Tren de Aragua and the Sinaloa Cartel.

Periodic updates (2)
11 Oct 2026 · fim-2026-10-11

Sanctions Architecture and Evasion

US unilateral sanctions pressure against LATAM targets continued this cycle without corresponding EU or UK action. On 1 October 2026, OFAC designated an individual associated with CURP BUMR821228HBCNRF02 under Executive Order 13224, as amended, and Executive Order 14059, for providing financial, material and technological support to the Sinaloa Cartel; the designation was published in the Federal Register on 6 October 2026, a primary Treasury instrument. This action sits within the established architecture of US narcotics-trafficking sanctions authority and extends it to a named financial enabler rather than a cartel principal, consistent with a pattern of reaching the financial infrastructure around designated organisations rather than only the organisations themselves. Separately, and requiring more careful handling, is the Colombia situation: OFAC designated then-President Gustavo Petro, his wife, his son and the then-Interior Minister under EO 14059 on 24 October 2025, a confirmed action. Local Colombian reporting on 3 October 2026 suggested the possibility of further US Treasury or FBI-related action, but this report rests on a single secondary source citing another outlet, and no US agency has confirmed any further designation. The distinction matters for anyone assessing exposure: the 2025 Petro-family designation is settled fact; the 2026 reporting is, at present, unconfirmed.

Outlook

Watch for any confirmation or denial from OFAC or the US Treasury regarding further action connected to Colombia, and for whether the Sinaloa-linked designation pattern extends to additional named individuals in subsequent Federal Register publications.

11 Aug 2026 · fim-2026-08-05

Sanctions Architecture and Evasion

Venezuela's sanctions architecture is the dominant sanctions-architecture story to emerge this cycle, and its defining feature is continuity rather than change. Following Nicolas Maduro's capture on January 3, 2026, the Government of Venezuela, PdVSA, and Minerven remain designated as blocked property under the U.S. sanctions program. No Venezuela-related executive order has been revoked in the wake of the leadership change; relief has instead been administered through revocable general licences, a mechanism that by design can be narrowed or withdrawn without legislative action. This is an assessed judgment, corroborated across several tier-four legal-alert sources and a tier-one Congressional Research Service product, though no single tier-one OFAC statement was retrieved this cycle that confirms the full post-capture policy posture in one place — a gap worth flagging rather than papering over.

General licences function as a form of conditional, revocable relief: they authorize specified transactions or categories of activity notwithstanding an underlying blocking designation, but because they are issued, amended, or revoked by OFAC as a matter of administrative discretion rather than through executive-order amendment or legislative sanctions relief, they leave the underlying blocking designation of PdVSA, Minerven and the Government of Venezuela fully intact. This is a materially different posture than a genuine wind-down of the sanctions programme, and the distinction is the analytical core of this cycle's Venezuela finding: relief without dismantlement.

The architecture-preservation reading is reinforced by parallel enforcement activity. OFAC designated four Venezuela oil-sector companies and four shadow-fleet tankers as blocked property, citing the Maduro regime's increasing dependence on a global shadow fleet to facilitate sanctionable oil-revenue activity. This is a high-confidence finding, directly sourced to an OFAC press release, and it demonstrates that the sanctions programme's operational tooling continued without interruption through the leadership transition. The shadow-fleet designation tool applied here — targeting vessels rather than only the entities that own or charter them — has become a standard feature of OFAC's approach to oil-revenue-sanctions evasion across multiple programmes, and its continued application to Venezuela specifically indicates that evasion-logistics enforcement is proceeding on a track independent of, and unaffected by, the political-transition-driven general-licence activity.

Read together, the general-licence relief mechanism and the shadow-fleet designation programme point toward a deliberate strategy: Washington is holding sanctions relief in reserve as leverage over Venezuela's political trajectory rather than moving toward a post-sanctions posture. Architecturally, this is a preservation strategy, not a retirement strategy, and the distinction matters for how compliance functions should treat Venezuela exposure going forward — as a jurisdiction where the designation landscape could shift again on short notice via general-licence amendment rather than through a more deliberative rulemaking process.

A secondary, lower-signal thread in the sanctions space this cycle is Colombia's continuing progress reporting under the GAFILAT/FATF follow-up process tied to its 2018 mutual evaluation. No new rating movement or FATF publication was identified this cycle, and this is best read as a standing-status confirmation rather than a fresh finding; the DNFBP supervision gap previously documented in Colombia's IMF Financial Sector Assessment Program review remains outstanding.

Outlook

The near-term outlook for Venezuela sanctions architecture is defined by volatility-by-design: because relief runs through revocable general licences rather than statutory repeal, compliance functions with Venezuela exposure should expect the possibility of rapid amendment in either direction as the political transition proceeds, rather than a stable baseline. The shadow-fleet designation programme is likely to continue as the primary operational tool for constraining oil-revenue evasion regardless of how the general-licence posture evolves, since it targets logistics infrastructure rather than the political question of relief. For Colombia, the absence of new FATF/GAFILAT movement this cycle should not be read as resolution of the underlying DNFBP supervision gap; that gap remains a standing structural vulnerability independent of Colombia's current follow-up status. This framing is illustrative analytical orientation only, not a prediction of how any specific designation or licence will be resolved.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

LATAM sits outside the direct supervisory and regulatory perimeter of the EU AML Package, and the region own D2 signal this cycle is best read on its own regulatory footing before any reference to that European backdrop. The directly relevant development for this bloc is the persistent absence of effective beneficial-ownership enforcement in Bolivia and Haiti: neither jurisdiction ensures timely, accurate, up-to-date beneficial-ownership information accessibility, nor operates an effective sanctioning regime for beneficial-ownership breaches, per FATF own action-plan language tied to Recommendations 24 and 25. That absence is not a technical gap; it is the mechanism by which layered shell structures persist undetected across the region legal-person transparency baseline, and it sits alongside the same two jurisdictions ongoing FATF grey-listing. Panama, by contrast, offers the regional counter-example: its delisting from the EU high-risk third-country list, via Delegated Regulation (EU) 2025/1184 in June 2025, evidences that reform-driven improvement in corporate-transparency standing is achievable inside the bloc. That said, OCCRP reporting flags the delisting as potentially outpacing the underlying reform substance, a gap between a Tier-1 delisting decision and Tier-2 investigative scepticism that is itself an analytically relevant signal under FIM source-hierarchy methodology, and one that argues for continued monitoring of Panama corporate-registry practice rather than treating the delisting as a closed matter.

Continue reading

Globally, the EU AML Package sets the structural direction against which beneficial-ownership regimes worldwide are increasingly measured, and it forms the durable backdrop for reading this cycle bloc-level signal even though LATAM states sit outside its direct scope. The Package now comprises three distinct instruments: the AML Regulation, or AMLR (Regulation (EU) 2024/1624), which is directly applicable across EU member states without national transposition; the sixth AML Directive, or 6AMLD, which each member state transposes into domestic law individually; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and creates a hybrid EU-level supervisory perimeter with direct and indirect supervision of certain cross-border obliged entities, shifting authority away from purely national supervisors. As a non-EU, non-EEA bloc, LATAM states are not subject to AMLR direct applicability, 6AMLD transposition obligations, or AMLA direct/indirect supervision; the operative linkage for this region instead runs through the EU Article 9 high-risk third-country list, where Venezuela addition and Panama delisting, in the same June 2025 instrument, are the concrete points of contact between LATAM corporate-transparency practice and the European architecture.

The practical takeaway for obliged entities dealing with LATAM counterparties is that beneficial-ownership risk in this bloc is unevenly distributed and structurally, not episodically, determined: Bolivia and Haiti carry unresolved deficiencies with no near-term resolution signalled, while Panama demonstrates that reform is possible but not yet fully verified at the level of underlying registry practice.

Outlook

The most consequential near-term event for LATAM beneficial-ownership standing is the FATF October 2026 Plenary review of Bolivia and Haiti progress, which will determine whether either jurisdiction narrows its beneficial-ownership enforcement gap sufficiently to advance toward delisting. On the European side, the EU high-risk-third-country list review clause anticipates a further Commission reassessment of Venezuela status following that FATF outcome, a development obliged entities transacting with Venezuelan corporate structures should track as an input to risk-rating rather than as a firm-specific instruction. Panama post-delisting registry practice remains an open verification question that this brief flags for continued monitoring rather than resolution this cycle.

Judgment: No LATAM beneficial-ownership registry development identified this cycle. Uncertain
Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

This cycle establishes the first LATAM-bloc D2 baseline, and it does so from a bloc-perimeter vantage point rather than a European one: LATAM states sit outside the EU AML Package direct supervisory scope, and the durable structural fact of that Package, as three distinct instruments, is the backdrop against which this baseline is read rather than its primary subject. The AML Regulation, or AMLR (Regulation (EU) 2024/1624), applies directly across EU member states without national transposition; the sixth AML Directive, or 6AMLD, is transposed individually by each member state; and the AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority, creating a hybrid EU-level supervisory perimeter that shifts direct and indirect supervision of certain cross-border obliged entities away from purely national authorities. None of AMLR direct applicability, 6AMLD transposition, or AMLA direct/indirect supervision extends to LATAM as a non-EU, non-EEA bloc; the operative point of contact instead runs through the EU Article 9 high-risk third-country list.

Within that frame, the baseline this cycle establishes for LATAM itself is one of sharply uneven beneficial-ownership maturity. Bolivia and Haiti both carry unresolved FATF findings that neither jurisdiction ensures timely, accurate, up-to-date beneficial-ownership information accessibility, nor operates an effective sanctioning regime for beneficial-ownership breaches, deficiencies tied directly to Recommendations 24 and 25 and to each jurisdiction ongoing grey-listing. This is not framed by FATF as a technical shortfall; it is the structural mechanism that allows layered shell structures to persist undetected across the region legal-person transparency baseline, and absent a resolution timeline, it should be read as a durable rather than transitional condition.

Panama supplies the baseline counter-example. Its June 2025 delisting from the EU high-risk third-country list, via Delegated Regulation (EU) 2025/1184, in the same instrument that added Venezuela, is evidence that reform-driven improvement in corporate-transparency standing is achievable within the bloc. But this baseline also registers a caveat worth carrying forward: OCCRP reporting characterises the delisting as potentially outpacing the underlying reform substance, and the resulting gap between a Tier-1 regulatory decision and Tier-2 investigative scepticism is itself a signal under FIM source-hierarchy methodology. Future cycles should treat Panama corporate-registry practice as an open verification question rather than a settled improvement.

As a state-of-the-domain synthesis, the LATAM D2 baseline this cycle is one of structural unevenness: two grey-listed states with unresolved and apparently durable beneficial-ownership enforcement gaps, set against one delisted state whose underlying reform depth remains contested. The bloc sits entirely outside the EU AML Package own direct perimeter, meaning its beneficial-ownership trajectory will be shaped primarily by FATF action-plan review cycles, principally the scheduled October 2026 Plenary, rather than by any EU supervisory mechanism. This baseline flags limited signal density this cycle, reflecting that D2 developments for the bloc were narrower in volume than D1, D3 or D5, even though their structural significance, particularly the Bolivia/Haiti enforcement gap, is high.

domain_sub_briefs · D2 · Cumulative analysis
Periodic updates (1)
11 Oct 2026 · fim-2026-10-11

Beneficial Ownership and Corporate Transparency

LATAM sits outside the EU AML Package's direct perimeter: the AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority apply within the EU/EEA and do not bind any Ibero-American or broader LATAM jurisdiction directly. For this bloc, the directly relevant beneficial-ownership development this cycle is national: Argentina's CNV General Resolution 1139/2026 confirms that access to the PSAV Registry now depends on a substantive integrity and solvency assessment of the applicant, its directors and its beneficial owners, rather than automatic acceptance of a filing. This is a targeted sectoral beneficial-ownership scrutiny mechanism applied to virtual-asset service providers rather than a general corporate-registry reform, and it is relevant to FATF Recommendation 15. No bloc-wide beneficial-ownership registry development was evidenced this cycle beyond this national Argentine tightening. Globally, the EU AML Package sets the structural direction that many jurisdictions worldwide are increasingly measured against informally, with its hybrid EU-level supervisory model under AMLA shifting beneficial-ownership and broader AML supervision away from purely national authorities toward direct and indirect EU-level oversight of cross-border obliged entities; this is durable structural backdrop rather than a LATAM-specific development, and it is reported here as standing context against which Argentina's own national tightening can be read, rather than as a finding about LATAM itself.

Outlook

Watch for whether other LATAM jurisdictions follow Argentina's model of attaching beneficial-ownership scrutiny specifically to virtual-asset-sector registration, and for the precise in-force date of CNV GR 1139/2026, which has not yet been confirmed against primary CNV text.

D3 Enabler Jurisdictions

no_changeno_changestanding position

Enabler Jurisdictions

The US-Mexico border corridor shows an active enabler-jurisdiction dynamic this cycle, visible through two distinct FinCEN instruments that together describe a laundering architecture relying on complicit Mexican brokers and US financial institutions rather than on a single identifiable choke point. On 2 September 2026, FinCEN reissued a Geographic Targeting Order requiring money services businesses operating along the US southwest border to file currency transaction reports on cash transactions between $1,000 and $10,000 in named counties in Texas and New Mexico. The GTO's enhanced reporting threshold, well below the standard currency transaction report trigger, targets precisely the mid-size cash movements that cartel-linked laundering networks use to stay beneath ordinary reporting radar when moving through the MSB layer rather than through banks directly.

Continue reading

Running alongside the GTO, FinCEN's supplemental alert of 30 June 2026 addresses fiscal fuel-theft and smuggling schemes tied to the CJNG, Sinaloa and Gulf cartels. FinCEN's own alert text states that financial institutions have reported more than seven billion dollars in suspicious activity related to this typology since the original alert was issued in May 2025, and FinCEN's own characterisation describes fuel theft as the cartels' most significant non-drug illicit revenue source. That FinCEN judged it necessary to issue a second, supplemental alert rather than let the May 2025 alert stand on its own is itself informative: it suggests the typology has proven durable enough, or large enough in reported volume, to warrant renewed vigilance guidance to financial institutions more than a year after the original warning.

The enabler-jurisdiction reading of this pair of instruments is that the US southwest border functions as the point where cartel-controlled Mexican fuel-theft and trafficking proceeds are converted into the formal financial system, with Mexican brokers and intermediary MSBs providing the complicit layer and US financial institutions providing the destination layer where the suspicious-activity reporting ultimately originates. The seven-billion-dollar reported figure, measured against what the jurisdiction risk tracker characterises as a relative enforcement gap given the scale, is the single most consequential quantified signal in this domain this cycle — it indicates a typology operating at a scale that dwarfs most other documented regional laundering schemes, while prosecutions and asset-forfeiture actions have not been shown, in the material reviewed this cycle, to be proceeding at a commensurate pace.

Outlook

The metric worth tracking forward is whether the volume of suspicious-activity reporting under the fiscal fuel-theft alert begins to translate into disclosed enforcement outcomes — prosecutions, asset seizures, or MSB licence actions — that are proportionate to the seven-billion-dollar reporting figure. A continued pattern of rising reported volume without a corresponding rise in disclosed enforcement actions would sharpen the enforcement-gap reading the jurisdiction risk tracker already flags for Mexico this cycle.

Judgment: No LATAM enabler-jurisdiction development identified this cycle. Uncertain
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

This cycle establishes the first LATAM-bloc D3 baseline, and its central finding is that enabling infrastructure in this region tends to survive individual enforcement actions because the underlying professional-facilitator or permit-arbitrage mechanism is rarely itself dismantled. The clearest illustration is the Mexican cartel crude-oil and fuel-theft architecture: CJNG and Sinaloa Cartel proceeds move through complicit Pemex insiders, mislabelled fuel shipments, and Mexican brokers holding CNE rather than SENER import permits, into ordinary cross-border energy trade with complicit US traders, at a scale FinCEN own alert describes as costing billions of dollars. The permit-arbitrage layer, the exploitation of the gap between CNE and SENER licensing regimes, is the architecture worth tracking; OFAC designations in May 2025 and June 2026 are downstream data points against that architecture rather than disruptions of it, and the persistence of the underlying broker infrastructure across at least two separate designation waves is itself the baseline signal this cycle establishes for Mexico.

A second structural thread in this baseline concerns free-trade-zone infrastructure as an enabling mechanism distinct from weak sanctions enforcement. Hizballah commercial and black-market financial network across Argentina, Brazil, Paraguay and Panama free-trade zones continues generating revenue through oil smuggling, black-market money exchange and counterfeiting, historically implicating the Clan Barakat network frozen by Argentina financial intelligence unit, per FinCEN Alert 508C. Panama free-trade-zone role in this network places it alongside Mexico as a bloc jurisdiction where permissive trade-zone architecture, rather than an absence of designations, is the operative enabling condition, a distinction that matters for how firms and regulators should target future intervention.

Argentina itself supplies a third and analytically distinct baseline element: its 2024 Mutual Evaluation found terrorism-financing investigations mostly reactive and dependent on suspicious transaction reports, with no terrorism-financing convictions despite substantial Tri-Border-Area and Hizballah-linked exposure. Under the enablement-as-signal principle this baseline applies throughout, the absence of prosecutions following the well-documented Clan Barakat freeze is itself significant: a freeze without a conviction limits deterrent effect and points to an institutional capacity constraint rather than an absence of prosecutable activity. This finding is anchored solely in the 2024 Mutual Evaluation Report; the baseline explicitly flags a need for updated 2025-2026 FIU or court-level data before treating the prosecution gap as resolved or worsening.

As a state-of-the-domain synthesis, LATAM D3 this baseline establishes a bloc where enabling architecture, permit arbitrage in Mexico, free-trade-zone commercial infrastructure spanning Argentina, Brazil, Paraguay and Panama, and a prosecutorial capacity gap in Argentina, consistently outlasts individual enforcement actions. No scheduled regulatory event in the near term directly targets any of these three architectures; each remains an open structural gap absent a dedicated reform intervention, whether a CNE/SENER permit-reconciliation initiative or a coordinated multi-jurisdictional prosecutorial effort. This baseline recommends treating persistence of architecture, rather than the cadence of individual designations, as the primary D3 risk indicator for the bloc going forward.

domain_sub_briefs · D3 · Cumulative analysis
Standing baseline position

Mexican enabler-jurisdiction risk now extends to a professional-enablement layer (legal/PR services) supporting cartel financial infrastructure, per OFAC's designation of Casino Centenario, Diamante Casino, CAMSA and named individual enablers.

Periodic updates (2)
11 Oct 2026 · fim-2026-10-11

Enabler Jurisdictions and Professional Facilitators

Curaçao's gambling-sector AML regime has been operationalised in a manner that represents a genuine, though still commentary-sourced, reduction of its historically permissive-hub role. Under the National Ordinance on Games of Chance (LOK), licensees are now required to maintain a dedicated compliance-officer role and an AML/CFT programme aligned to FIU Curaçao, and to file unusual-transaction reports via the goAML platform under the NORUT ordinance. Crypto-facilitating gambling operators face on-chain transaction-monitoring expectations under this framework, and platforms built around anonymous crypto products face rejection at the licensing stage. This is architecturally significant: Curaçao has functioned for years as a low-friction licensing jurisdiction for online gambling operators, and the explicit alignment of its AML supervision with FIU Curaçao and the FATF-consistent goAML reporting channel narrows, without eliminating, the enablement role the jurisdiction has historically played. The absence of primary CGA or FIU Curaçao text directly retrieved this cycle, with the finding instead corroborated across similar vendor-commentary sources describing the same named ordinance, is the appropriate caveat on confidence here.

Outlook

Watch for direct confirmation from FIU Curaçao or the CGA of the goAML reporting volumes under the new regime, and for whether anonymous-crypto rejections at the licensing stage are evidenced in practice rather than only in licensing-requirement guidance.

11 Aug 2026 · fim-2026-08-05

Enabler Jurisdictions and Professional Facilitators

Mexico's cartel-finance ecosystem this cycle shows clear evidence of typology diversification, extending well beyond the drug-proceeds laundering activity that has historically anchored enforcement attention toward professional-facilitator infrastructure operating at scale. Three distinct developments illustrate the breadth of this shift. First, FinCEN issued a supplemental alert on fiscal fuel-theft and tax-evasion schemes on June 30, 2026, timed alongside an OFAC designation of two Mexican nationals and nine entities tied to a CJNG-linked fuel-smuggling network. The joint FinCEN/OFAC architecture — a typology alert paired with a coordinated designation action — signals that fuel theft is now being treated as a financial-crime vector in its own right, generating its own BSA reporting obligations for banks handling related flows, rather than as a secondary feature of narcotics-proceeds laundering.

Second, on April 14, 2026, OFAC designated six targets — including Casino Centenario, Diamante Casino, and a facilitating attorney, among others — tied to a money-laundering and cash-smuggling enterprise operated by Cartel del Noreste. The inclusion of a facilitating attorney among the designated targets is notable: it extends the enforcement action beyond the casinos themselves into the professional-services layer that structures and legitimizes the laundering activity, a pattern consistent with the enabler-jurisdiction framing this domain is built to track even when the underlying jurisdiction is not itself a traditional professional-services hub.

Third, and assessed with somewhat lower confidence, Chinese money-laundering organizations have been documented extending underground-banking services to Mexico-based cartels beyond the consumer-goods trade-laundering role for which they are best known, moving into more direct placement via financial institutions and real estate. This finding rests on a tier-four vendor synthesis corroborated by a primary FinCEN typology document, and is capped at an assessed confidence level absent a second tier-one or tier-two source specific to the drift claim — a limitation worth carrying forward rather than treating as settled. If accurate, it represents a meaningful expansion of the underground-banking layer's function, from a laundering conduit for trade-based schemes into a more general-purpose placement and integration service for cartel proceeds.

Taken together, these three developments describe a professionalization of Mexico's cartel-finance infrastructure: multiple parallel typologies operating simultaneously, each drawing in different categories of professional facilitator — logistics operators, gaming-venue operators and their legal counsel, and cross-border money-services networks. This is a structural finding, not an episodic one, and it should be read as evidence of an enabler ecosystem that is deepening rather than a series of unconnected enforcement actions.

Outlook

The joint FinCEN/OFAC enforcement architecture applied to fuel theft this cycle is likely a template for further coordinated action against typologies previously treated as tax or regulatory matters rather than AML matters, and banks and cross-sector firms with Mexican trade-finance or corporate exposure should expect continuing typology-alert activity along these lines. The extension of designation activity into the professional-services layer around casino-based laundering — reaching a facilitating attorney rather than only the venue operators — suggests enforcement attention is deliberately targeting the enabler layer rather than only the visible cash-handling nodes. The Chinese CMLO underground-banking finding, if corroborated further in coming cycles, would represent the most structurally significant of the three developments. This framing is analytical orientation only and does not constitute a compliance-screening conclusion regarding any named entity.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

The most severe D4 finding this cycle is the July 2025 Treasury designation of Cartel de los Soles as a criminal group linked to senior Venezuelan state and military figures, providing logistical and financial support that connects Tren de Aragua to the Sinaloa Cartel. Applying the state-capture filter directly, this designation describes a node at which the distinction between state authority and private criminal enterprise has functionally collapsed: state-military figures are described as providing support to organisations, including Tren de Aragua and the Sinaloa Cartel, that would ordinarily be treated as external threats to state authority rather than beneficiaries of it. This is the clearest instance this cycle of a state institution appearing to protect, or actively participate in, illicit financial flows rather than merely fail to prevent them, and it is precisely the kind of finding the F1 filter is designed to surface and route to WDM kleptocratic-network tracking.

Continue reading

The second major D4 finding is the Mexican cartel crude-oil and fuel-theft architecture, which continues at what FinCEN own alert language describes as billions-of-dollars scale, undisrupted by successive OFAC designation waves in May 2025 and June 2026. Read through the conflict-finance filter, this is not simply a financial-crime pattern but a direct revenue stream sustaining cartel violence and territorial control in Mexico, tracing from the point of theft, through complicit Pemex insiders and CNE-permit-holding brokers, to deployment as operating capital for continued cartel activity, including the violence FinCEN own alert explicitly links to the smuggling operations.

Together, these two findings describe conflict finance operating at two different levels of state proximity within the same reporting cycle: an alleged direct state-military nexus in Venezuela, and a state-adjacent but formally illicit extractive-sector theft architecture in Mexico. Both warrant escalation beyond FIM own domain boundaries; the Venezuela finding is flagged to WDM for its kleptocratic-network and state-capture dimension, while the Mexico finding is flagged to both ERM, for its commodity-flow characteristics, and SCEM, for its conflict-finance and violence-funding dimension.

Outlook

Neither the Cartel de los Soles designation nor the Pemex theft architecture has a scheduled regulatory checkpoint attached to it this cycle; both remain open, structurally embedded risks rather than time-bound compliance events. The practical implication for obliged entities is that PEP and fund-structure customer typologies connected to Venezuelan state-adjacent actors, and trade-finance and correspondent-banking exposure connected to Mexican energy-sector counterparties, both warrant continued enhanced scrutiny independent of any near-term regulatory trigger, since the underlying conflict-finance architectures in both cases are described by primary sources as active and ongoing rather than resolved.

Judgment: No LATAM conflict-finance development identified this cycle. Uncertain
Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

This cycle establishes the first LATAM-bloc D4 baseline, anchored by two findings that together describe conflict finance operating at two distinct levels of state proximity within a single reporting window. The more severe of the two is the July 2025 Treasury designation of Cartel de los Soles as a criminal group linked to senior Venezuelan state and military figures, providing logistical and financial support that connects Tren de Aragua to the Sinaloa Cartel. Applying the state-capture filter, this designation describes a node at which the distinction between state authority and private criminal enterprise has functionally collapsed, with state-military figures described as supporting organisations that would ordinarily be treated as external threats to state authority. This baseline treats that finding as the clearest instance of a state institution appearing to protect, or actively participate in, illicit financial flows, rather than merely fail to prevent them, and flags it for continued cross-reference to WDM kleptocratic-network tracking in future cycles.

The second baseline anchor is the Mexican cartel crude-oil and fuel-theft architecture, continuing at what FinCEN own alert language describes as billions-of-dollars scale and undisrupted by successive OFAC designation waves in May 2025 and June 2026. Read through the conflict-finance filter, this is a direct revenue stream sustaining cartel violence and territorial control, traceable from the point of theft, through complicit Pemex insiders and CNE-permit-holding brokers, to deployment as operating capital for ongoing cartel activity, including the violence FinCEN own alert explicitly links to the smuggling operations. This baseline flags the finding for continued cross-reference to both ERM, for its commodity-flow evasion characteristics, and SCEM, for its conflict-finance and violence-funding dimension.

As a state-of-the-domain synthesis, the LATAM D4 baseline this cycle establishes conflict finance as operating simultaneously at an alleged direct state-military nexus in Venezuela and at a state-adjacent but formally illicit extractive-sector theft architecture in Mexico. Neither finding carries a scheduled regulatory checkpoint; both are structurally embedded risks that this baseline expects to persist absent a targeted intervention specific to either the Venezuelan state-military nexus or the Mexican broker-permit architecture. Obliged entities with PEP or fund-structure exposure connected to Venezuelan state-adjacent actors, or trade-finance and correspondent-banking exposure connected to Mexican energy-sector counterparties, should treat both architectures as active and ongoing rather than resolved, and this baseline recommends carrying both forward as standing D4 watch items into subsequent cycles pending any material enforcement or policy development.

domain_sub_briefs · D4 · Cumulative analysis
Periodic updates (1)
11 Aug 2026 · fim-2026-08-05

Conflict Finance and Extractive-Industry Integrity

Venezuela's oil sector remains the primary conflict-finance and extractive-industry vector under active tracking this cycle, though the volume of new material is thinner than in the sanctions-architecture and enabler-jurisdiction domains. The core mechanism sustaining Venezuela's illicit oil-revenue architecture continues to be PdVSA oil-sector sanctions, which remain in force pending unmet geopolitical conditions tied to severing the government's ties with China, Russia, Iran and Cuba. OFAC's continuing designation of shadow-fleet tankers and oil-trading companies — four companies and four tankers designated as blocked property for sustaining Maduro-regime oil revenue — is the same underlying finding tracked under this cycle's sanctions-architecture reading, but from a conflict-finance lens it is significant primarily as evidence that oil-revenue evasion logistics remain the regime's principal external financing mechanism regardless of the country's internal political transition.

A related, lower-confidence connection worth surfacing here is the characterization of fuel theft as Mexican cartels' most significant non-drug revenue source, drawn from this cycle's FinCEN supplemental alert on fiscal fuel-theft schemes. While Mexico's fuel-theft typology is tracked substantively under the enabler-jurisdictions domain, its scale and centrality to cartel revenue generation gives it an extractive-industry-integrity dimension worth noting: illicit fuel diversion functions analogously to an extractive-resource-revenue capture mechanism, even though the underlying commodity and jurisdictional context differ substantially from Venezuela's state-level oil-sector sanctions evasion.

This domain carries a limited-signal flag this cycle: no new extractive-industry-specific development beyond the continuation of existing Venezuela oil-sector sanctions and the cross-referenced Mexican fuel-theft finding was identified, and no direct conflict-finance development for other LATAM extractive sectors was surfaced.

Outlook

Venezuela's oil-sector sanctions architecture is likely to remain the dominant conflict-finance signal in this domain for as long as the underlying geopolitical conditions attached to sanctions relief remain unmet. Mexican fuel theft's continued escalation as a cartel revenue source bears watching as a structurally significant, non-episodic development, notwithstanding its primary tracking under the enabler-jurisdictions domain. This is illustrative analytical framing only and does not constitute a forecast of any specific sanctions or enforcement outcome.

D5 Crypto / Digital Assets / Financial Innovation

material_changematerial_change

Crypto / Digital Assets / Financial Innovation

Brazil's central bank has converted a long-permissive virtual asset environment into a supervised one through a two-stage mechanism. Incumbent virtual asset service providers active in the market had until 30 October 2026 to file phase-one authorisation applications with the Banco Central do Brasil, and from 6 November 2026 BCB-supervised banks and payment institutions are prohibited from dealing with unauthorised virtual asset service providers. The practical effect is a banking-sector chokepoint: platforms that did not file, or whose applications are not accepted, lose access to the regulated correspondent and payment-processing relationships that any sizeable virtual asset business depends on to move fiat currency. This is a structural development rather than an episodic enforcement action, since it reshapes the operating perimeter for the entire sector rather than targeting a single firm.

Continue reading

The confidence attached to this finding is qualified rather than confirmed. The underlying Banco Central do Brasil resolutions governing the filing window and the counterparty prohibition were not directly retrieved this cycle, and the finding instead rests on convergent legal and compliance commentary describing a 270-day filing period culminating in the authorisation deadline. That commentary is consistent on the mechanism and the dates, but a primary regulatory anchor would be needed to move the finding to a more assertive footing. Firms and counterparties relying on the practical effect of the 6 November cut-off should treat the dates as the operative fact while treating the precise statutory mechanics as still resting on secondary sourcing.

The three-pillar balance point worth surfacing here is that this is fundamentally an anti-money-laundering supervisory expansion, achieved through a licensing and counterparty-access mechanism rather than through sanctions or a counter-proliferation-financing lever. It is also a case where the analytically significant question is not an enforcement action against a specific bad actor but the removal of a permissive gap: Brazil's virtual asset sector had operated for years without comprehensive central-bank oversight, and the absence of that oversight was itself part of the risk picture. The closing of that gap, if enforced as described, is the more significant structural fact than any individual authorisation decision the Banco Central do Brasil subsequently makes.

Outlook

The period immediately following 6 November 2026 is the point at which this finding will either firm up or soften. If supervised banks visibly decline counterparty relationships with unauthorised platforms and if a primary Banco Central do Brasil text becomes available confirming the filing and prohibition mechanics, the finding should move toward a more assertive confidence framing. If enforcement proves inconsistent, or if a grace period or informal tolerance emerges in practice, the structural claim that Brazil's crypto sector is now under full central-bank anti-money-laundering supervision would need to be revisited. Either way, the mechanism itself, an authorisation deadline paired with a banking-sector counterparty prohibition, is a template worth watching for replication elsewhere in the region.

Judgment: Brazil's BCB VASP authorisation deadline (30 Oct) and bank-counterparty prohibition (6 Nov) bring Latin America's largest crypto market under full central-bank AML supervision for the first time. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

This cycle establishes the first LATAM-bloc D5 baseline, and Brazil is its pivotal jurisdiction. The Central Bank of Brazil new VASP authorization regime, SPSAV, brought reporting obligations into force from 4 May 2026 ahead of a full licensing deadline of 29 October 2026, a regime build-out arriving against a backdrop where cartel proceeds, sanctioned-entity flows and Chinese-language money-laundering-network activity together account for more than half of identified illicit inflows to select Brazilian exchanges in 2025, concentrated on a small number of deposit addresses. This baseline treats that concentration as the central analytical fact of the domain: the new regime confronts a small number of already-identifiable high-value illicit flows rather than diffuse low-value activity, making the October 2026 licensing deadline a genuine effectiveness test rather than an abstract compliance milestone, and a marker this baseline expects future cycles to revisit directly.

Continuing enforcement activity sharpens this test case. OFAC designation of two Brazilian nationals and four companies for laundering over thirty million dollars in US-generated drug proceeds via cryptocurrency back to Brazil, its third action against the Primeiro Comando da Capital since 2021, establishes that crypto-facilitated laundering by Brazil-linked organised-crime groups is a recurring pattern predating the new authorization regime, one this baseline expects will persist absent structural detection improvements rather than being resolved by the regime introduction alone.

Beyond Brazil, this baseline registers Venezuela crypto ecosystem as a structurally distinct but related finding: growing dependency on USDT-denominated retail and remittance activity, driven by bolivar depreciation and sanctions pressure. This digital-dollarisation trend carries direct AML and sanctions-screening perimeter implications, since it channels retail-scale value transfer through stablecoin rails sitting partly outside traditional correspondent-banking screening architecture, and this baseline treats it as analytically distinct from, though contextually related to, the D1 sanctions-liberalisation trend affecting Venezuela oil-sector transactions.

Globally, frameworks such as MiCA and the FATF virtual-asset standards continue to set contextual direction for digital-asset regulatory maturity, but this baseline confirms that for the LATAM bloc the immediately relevant regulatory action remains domestic, principally Brazil own SPSAV regime and its associated asset-seizure powers under Law No. 15.358. As a state-of-the-domain synthesis, LATAM D5 this baseline is one of a region building genuine regulatory capacity, in Brazil, precisely at the moment illicit-flow concentration in exchange data is already well documented, with Venezuela stablecoin dependency running as a parallel, ongoing structural condition rather than an event-bound risk. The SPSAV licensing deadline of 29 October 2026 and the CVM crypto-securities rulemaking are the two scheduled checkpoints this baseline expects to shape the domain trajectory most directly in the coming cycles.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

Brazil's BCB VASP authorisation deadline (30 October 2026) and Argentina's CNV GR 1139/2026 substantive-review standard are this cycle's most material national VASP-gatekeeping developments within the LATAM bloc record.

Periodic updates (4)
25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

FATF's seventh Targeted Update on virtual assets and virtual-asset service providers, published 16 July 2026, records that eighty-three percent of surveyed jurisdictions worldwide have now passed legislation implementing the Travel Rule under FATF Recommendation 15, an increase from seventy-three percent recorded in 2025. GAFILAT, the Financial Action Task Force-style regional body for Latin America, is named among the coordinating bodies supporting Travel Rule and broader virtual-asset supervisory implementation across its LATAM membership. This is a global statistic rather than a GAFILAT-specific measurement, and the material reviewed does not establish what proportion of GAFILAT's own member states specifically sit within that eighty-three percent figure; the regional detail rests on a general description of GAFILAT's coordinating role rather than an independently quoted GAFILAT-sourced percentage.

The distinction between legislative passage and practical supervisory implementation is the key qualifying point for this domain. Passing Travel Rule legislation establishes the legal basis for virtual-asset service providers to collect and transmit originator and beneficiary information on qualifying transfers; it does not by itself establish that supervisory authorities across the region have built the examination, data-matching and enforcement capacity to confirm that obliged entities are actually complying. Regional stablecoin adoption across LATAM continues to deepen through member-state-specific regimes — the companion payments and crypto-monitor coverage documents Brazil's and El Salvador's national frameworks specifically — rather than through any bloc-wide binding instrument, which means GAFILAT's coordinating function operates across a membership with materially different starting points in licensing and classification regimes for virtual-asset activity.

No LATAM-specific enforcement action, designation, or sanctions-evasion typology involving virtual assets was evidenced in the material reviewed beyond the Travel Rule implementation statistic itself. The absence of a documented enforcement action in this domain does not establish an absence of risk; it reflects what the retrieved material actually supports.

Outlook

The material gap to watch is whether GAFILAT's own sectoral virtual-asset risk assessment, not yet independently retrieved and quoted, surfaces region-specific implementation data that would allow the eighty-three percent global Travel Rule figure to be disaggregated for GAFILAT's own membership. Growing stablecoin settlement volumes across the bloc, documented elsewhere, raise the stakes for closing the gap between legislative passage and practical supervisory capacity for virtual-asset service providers across GAFILAT's member states.

11 Oct 2026 · fim-2026-10-11

Crypto, Digital Assets, and Financial Innovation

Brazil's crypto-gatekeeping regime reaches its decisive point this quarter. Under BCB Resolutions 519, 520 and 521 (2025) and Law 14,478/2022, existing virtual-asset service providers must file authorisation requests with the Central Bank by 30 October 2026; from that date, BCB-authorised banks and payment institutions will be barred from transacting with any VASP that has not filed, or completed, authorisation. Separately, stablecoin transfers against unauthorised counterparties are classified as foreign-exchange operations and capped at US$100,000 per transaction, with monthly reporting to the Central Bank that has been in force since 4 May 2026. In Argentina, the second-largest crypto market in the bloc, CNV General Resolution 1139/2026 confirms that PSAV Registry access now depends on a substantive integrity and solvency assessment of the applicant, its directors and its beneficial owners -- a change bearing directly on FATF Recommendation 15 on virtual-asset service providers. These two national tightenings, in the region's largest crypto markets, are the most active financial-integrity signal this cycle; no bloc-wide crypto-AML instrument underlies either of them, and GAFILAT's role remains confined to typology and risk-assessment guidance rather than binding regional rules.

Outlook

The 30 October 2026 Brazilian deadline is the clearest date in the bloc's crypto calendar this cycle; watch for market consolidation among exchanges ahead of it and for confirmation of the precise in-force date of Argentina's CNV GR 1139/2026.

5 Sep 2026 · fim-2026-08-21

Crypto / Digital Assets / Financial Innovation

Brazil central bank has spent the first three quarters of 2026 building a comprehensive supervisory perimeter around virtual asset activity, and this cycle most consequential development narrows one of the last unsupervised channels: the use of stablecoins and other crypto assets to settle the offshore leg of regulated cross border payments. BCB Resolution 561, effective 1 October 2026, bars electronic FX providers from using stablecoins or crypto for this purpose, and pairs the restriction with segregated client account requirements, monthly FX reporting, and ten year record retention. The central bank has framed the measure explicitly around illicit finance traceability, positioning it as a financial integrity control rather than a purely prudential one.

This restriction does not stand alone. Since 2 February 2026, the SPSAV authorization regime under BCB Resolutions 519 through 521 of 2025 has required virtual asset service providers to obtain central bank authorization, with an application deadline of 30 October 2026 after which unauthorized providers lose access to the banking system entirely. The authorization regime brings know your customer and anti money laundering control obligations, asset segregation duties, and OECD Crypto Asset Reporting Framework reporting through the DeCripto system, which came into effect in July 2026 and extends to foreign providers serving Brazilian customers. Read against Resolution 561, the emerging picture is a bank style, centrally supervised virtual asset perimeter in which market access is conditioned on licensing status, while the specific regulated electronic FX settlement channel is closed to unsupervised stablecoin flows.

For financial integrity purposes, the significant structural fact is not any single enforcement action but the architecture itself: market access to the banking system is now conditioned on licensing status for virtual asset providers, and the offshore settlement leg of regulated payments is closed to unauthorized stablecoin flows regardless of whether any specific transaction is ever flagged. This is the kind of structural, enablement reducing change this monitor weights heavily relative to episodic enforcement, because it changes the population of available illicit finance vectors going forward rather than punishing a single past instance. Brazil jurisdiction risk trajectory this cycle is accordingly assessed as decreasing on the crypto rail dimension, reflecting the consolidation of supervisory reach rather than any single case outcome.

The sourcing base for these findings remains a limitation. No tier one BCB gazette text for Resolutions 519 through 521 or Resolution 561 was directly retrieved this cycle; the findings rest on tier three and tier four secondary press coverage, including CoinDesk, Crypto Briefing, and Cryptowisser reporting. This is a materiality relevant caveat: the underlying facts are corroborated across multiple independent secondary sources, which supports an Assessed confidence tier, but a primary source confirmation has not yet been achieved and should be prioritized in the next research cycle.

Beyond Brazil, the LATAM bloc crypto integrity picture remains largely unresolved this cycle. Mexico, Argentina, and Colombia have not produced comparable crypto specific supervisory developments in the evidence base available this cycle, leaving Brazil as an outlier of regulatory maturity within the region rather than representative of a bloc wide trend.

Outlook

The near term watch list centers on two implementation dates: the 1 October 2026 effective date for the Resolution 561 stablecoin settlement restriction, and the 30 October 2026 SPSAV authorization deadline, after which unauthorized providers lose banking access. DeCripto reporting, live since July 2026, will generate an ongoing CARF aligned data stream that may surface further illicit finance signal relevant to this domain in future cycles. A primary source BCB gazette retrieval for Resolutions 519 through 521 and 561 remains the top sourcing priority, and continued silence from Mexico, Argentina, and Colombia on comparable crypto supervisory frameworks should itself be tracked as a structural gap rather than treated as a stable absence of risk.

11 Aug 2026 · fim-2026-08-05

Crypto, Digital Assets, and Financial Innovation

Brazil's central bank has closed what had been the region's largest unregulated virtual-asset perimeter. Banco Central do Brasil Resolutions 519, 520 and 521 established a comprehensive authorization regime for virtual-asset service providers, in force since February 2, 2026, with a 270-day transition period running to October 30, 2026. This is a high-confidence, tier-one-sourced finding, and its significance extends beyond Brazil's domestic market: the regime is explicitly framed against the FATF Recommendation 15 standard on new technologies, meaning it functions as a regional benchmark that other LATAM regulators are now visibly measuring their own frameworks against. The regime's capital-adequacy and AML/CFT requirements represent a substantial step up from the historically light-touch VASP registration norms that have characterized much of the region.

Argentina and Mexico are formalizing crypto-adjacent frameworks in parallel, though from materially weaker supervisory starting points than Brazil's. Argentina's central bank is understood to be finalizing a framework, targeted for April 2026, that would permit licensed banks to offer custody, trading and payment services in bitcoin, ether, USDC and USDT — a reversal of the May 2022 prohibition on bank crypto services. This finding is corroborated across tier-three and tier-four sources but was not confirmed against a tier-one BCRA circular retrieved directly this cycle, and is accordingly held at an assessed confidence level. In Mexico, a Senate bill known as the Murat Initiative, introduced in May 2026, would restrict stablecoin issuance to authorized IFPEs and licensed banks, mandate Banxico-supervised one-to-one reserves, and criminalize unauthorized stablecoin issuance with penalties of five to fifteen years. This remains pending legislation sourced to a single tier-four legal-guide reference, not yet corroborated by a primary Mexican legislative or Banxico source, and is held at low confidence accordingly — a meaningfully different evidentiary posture than the Brazil and Argentina findings.

This diversification of pace is a familiar sequencing pattern in cross-border digital-asset regulation more broadly: a large domestic market moves first to a comprehensive licensing-plus-prudential model, while smaller or currency-constrained markets move toward narrower liberalization steps focused on specific product access or defensive containment. None of the three approaches should be read as equivalent in supervisory depth, notwithstanding their common direction of travel toward greater formal engagement with digital assets.

The combined picture across the three jurisdictions is one of formalization proceeding at different speeds and from different regulatory starting points, which creates a liberalization-ahead-of-supervision risk in the jurisdictions moving fastest without Brazil's capital-adequacy and independent-audit architecture already in place. Argentina in particular combines rapid bank-crypto-access liberalization with a still-forming supervisory framework, against a backdrop of very high existing stablecoin-driven dollarization volume in that market — a combination that merits continued monitoring rather than an assumption that formalization alone resolves the underlying supervisory gap.

Outlook

Brazil's October 30, 2026 compliance deadline is the calendar event most likely to generate the next material development in this domain, testing whether the region's largest VASP market can absorb capital-adequacy and independent-audit requirements without significant market exit. Argentina's bank-crypto framework, if finalized on its targeted April 2026 timeline, would represent the most consequential liberalization of the cycle after Brazil's, though its supervisory maturity relative to Brazil's model remains an open question. Mexico's stablecoin bill's legislative trajectory is the least certain of the three and should be treated as a horizon item rather than an imminent development pending stronger primary-source corroboration. This is illustrative analytical orientation only, not a prediction of any specific regulatory outcome.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

Brazil supplies this cycle only concrete D6 build-out for the LATAM bloc, and it is best read as a paired regulatory-technology and enforcement-power development rather than two separate items. The Central Bank of Brazil VASP authorization regime, SPSAV, is the region first hard compliance-technology test case: reporting obligations came into force on 4 May 2026, with a full licensing deadline of 29 October 2026, requiring crypto-asset operators to transition from a reporting-only obligation to full authorization. Because cartel proceeds, sanctioned-entity flows and Chinese-language money-laundering-network activity already account for more than half of identified illicit inflows to select Brazilian exchanges in 2025, this regime is not being introduced into a clean environment; it is being tested directly against known, concentrated illicit-flow patterns, which makes the October 2026 deadline a genuine active-defence proving ground rather than a routine licensing milestone.

Continue reading

Complementing that authorization regime, Brazil enacted Law No. 15.358 in March 2026, granting authorities expanded powers to freeze, seize and repurpose crypto assets linked to organised crime. Read together with SPSAV, this represents the most concrete active-defence build-out identified anywhere in the bloc this cycle: a detection-and-reporting layer (SPSAV) paired with an asset-disruption layer (Law 15.358), targeted directly at the illicit-flow concentration already identified in exchange data rather than at crypto-asset activity generally. This pairing is the kind of structural, tool-level development the D6 domain is designed to surface, distinct from the underlying D5 illicit-flow finding it is built to address.

No other LATAM jurisdiction registers a comparable D6 development this cycle; the domain signal for the bloc is concentrated entirely in Brazil, reflecting Brazil position as the region largest and most active digital-asset market and therefore its most urgent active-defence priority.

Outlook

The SPSAV full-authorization licensing deadline of 29 October 2026 is the direct test of whether Brazil new detection-and-reporting architecture translates into measurable disruption of the illicit-flow concentration already identified in 2025 exchange data. Law 15.358 asset-seizure powers provide the complementary enforcement lever, but their practical effectiveness will only become assessable once seizure or repurposing actions under the new law are documented in a future cycle. This brief treats the Brazil build-out as improving in trajectory but explicitly untested in outcome, consistent with the interpreter own assessment that whether the new controls close the identified gap remains an open question.

Judgment: No LATAM compliance-technology development identified this cycle. Uncertain
Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

This cycle establishes the first LATAM-bloc D6 baseline, and Brazil is, for now, its sole concrete anchor, reflecting Brazil position as the region largest and most active digital-asset market and therefore its most urgent active-defence priority. The Central Bank of Brazil VASP authorization regime, SPSAV, is the baseline first hard compliance-technology test case: reporting obligations came into force on 4 May 2026, with a full licensing deadline of 29 October 2026, requiring crypto-asset operators to transition from a reporting-only obligation to full authorization. Because cartel proceeds, sanctioned-entity flows and Chinese-language money-laundering-network activity already account for more than half of identified illicit inflows to select Brazilian exchanges in 2025, this baseline treats the regime as being tested directly against known, concentrated illicit-flow patterns rather than introduced into a clean environment, making the October 2026 deadline a genuine active-defence proving ground this baseline expects to revisit directly in future cycles.

Complementing that authorization regime, Brazil enacted Law No. 15.358 in March 2026, granting authorities expanded powers to freeze, seize and repurpose crypto assets linked to organised crime. This baseline reads SPSAV and Law 15.358 together as the most concrete active-defence build-out identified anywhere in the bloc: a detection-and-reporting layer paired with an asset-disruption layer, both targeted directly at the illicit-flow concentration already identified in exchange data rather than at crypto-asset activity in general. This pairing is precisely the kind of structural, tool-level development this domain exists to surface, and this baseline distinguishes it clearly from the underlying D5 illicit-flow finding it is designed to address.

As a state-of-the-domain synthesis, the LATAM D6 baseline this cycle is narrow in scope, limited to a single jurisdiction, but structurally significant: Brazil has paired detection with disruption capability in direct response to a documented illicit-flow concentration, a genuinely improving trajectory that remains, at this stage, untested in outcome. This baseline explicitly flags limited signal density, since no other LATAM jurisdiction registers a comparable development this cycle, and recommends that future cycles track whether SPSAV licensing outcomes and Law 15.358 seizure actions, once documented, demonstrate measurable disruption of the illicit-flow concentration this baseline has identified as the domain central open question.

domain_sub_briefs · D6 · Cumulative analysis

D7 AML/CTF Regime

material_changematerial_change

AML/CTF Regime

The Financial Action Task Force adopted the mutual evaluation report of Mexico at its 28-30 October 2026 Plenary, the first full evaluation of Mexico since 2018 and the first conducted against the stricter 2022 effectiveness methodology. The adoption itself is a procedural and structural milestone: it means the evaluators and the Plenary have signed off on the report's findings, but the detailed technical compliance and effectiveness ratings have not yet been published. Until those ratings are released, the substantive content of the evaluation, meaning which of Mexico's anti-money-laundering controls were found adequate and which were found deficient, remains unknown. The adoption nonetheless resets the formal evaluation clock for Mexico and will anchor the country's standing within the Financial Action Task Force of Latin America, known as GAFILAT, for the coming cycle.

Continue reading

Separately, the FATF Plenary's grey-list decisions this cycle removed Bulgaria, Cote d'Ivoire, the Democratic Republic of Congo and Monaco from increased monitoring, narrowing the global list from twenty-two to eighteen jurisdictions with no new additions. None of the four removed jurisdictions sit within the Financial Action Task Force of Latin America's eighteen-country membership, so this cycle's grey-list movement leaves the regional population of listed jurisdictions unchanged. This is worth stating explicitly rather than leaving as an implied absence: the global list moved, but the region's own listing exposure did not, and the two should not be conflated.

As a standing point of reference, the Financial Action Task Force of Latin America continues to bring together eighteen countries spanning South, Central and North America. This membership scope is the baseline against which any future regional listing or evaluation news should be read, including whatever detailed ratings eventually emerge from Mexico's adopted evaluation.

Reading these two threads together illustrates the architecture-over-incident principle that should govern how this cycle is weighed: the mutual evaluation adoption is a structural event even though it currently carries no publicly visible findings, while the grey-list movement, though visible and headline-generating at the global level, carries no structural implication for the region at all. The analytically significant item this cycle is the one without published content, not the one with a clear headline.

Outlook

The principal item to track is the publication of Mexico's detailed mutual evaluation ratings, which will determine whether the adopted report represents a demonstrable improvement in technical compliance and effectiveness since 2018 or whether it surfaces persistent gaps under the more demanding 2022 methodology. Those ratings, once published, will also inform whether any follow-up or enhanced monitoring process is triggered for Mexico within the Financial Action Task Force of Latin America framework. In the interim, the absence of any GAFILAT-member jurisdiction on the newly narrowed FATF grey list should be read as a stable baseline rather than as evidence of improvement, since no regional jurisdiction moved in either direction this cycle.

Judgment: FATF adopted the first full mutual evaluation of Mexico since 2018; grey-list removals this cycle do not affect GAFILAT membership. Probable
Cumulative analysis

AML/CTF Regime

Mexico's fifth-round FATF mutual evaluation is approaching a decision point this cycle. The onsite assessment period occurred in February 2026, with a possible Plenary discussion of the resulting ratings in the fourth quarter of 2026, per FATF's own published assessment calendar. Mexico's prior, 2018 evaluation placed the country under enhanced follow-up, reflecting a historical gap concentrated in the effectiveness of pursuing launderers and confiscating assets; the current round applies FATF's 2022 methodology, which weighs outcomes and effectiveness more heavily than the prior assessment cycle did. The scheduling of this evaluation and its possible Q4 2026 Plenary discussion is confirmed via FATF's own materials; the framing of this outcome as a material grey-list risk vector rests on secondary commentary layered on top of that scheduling fact, which is the appropriate basis for treating the overall judgment as probable rather than confirmed. This sits alongside a separate FATF-sourced fact for the bloc: Bolivia remains on the FATF grey list, under increased monitoring, per the June 2026 Plenary outcome.

Outlook

The Q4 2026 FATF Plenary is the key date to watch for Mexico's mutual-evaluation outcome. A downgrade to a lower follow-up category, or placement on increased monitoring, would represent a material deterioration in Mexico's standing within the bloc's largest economy; conversely, confirmation of continued enhanced follow-up without a formal grey-list designation would represent a more stable, if still unresolved, outcome.

domain_sub_briefs · D7 · Cumulative analysis
Standing baseline position

Mexico's FATF fifth-round mutual evaluation onsite occurred around February 2026, with a possible Plenary discussion in October 2026 that could determine regular follow-up, enhanced follow-up, or ICRG observation (a grey-list precursor).

D8 Commercial Activity

no_changeno_change
Judgment: No commercial-activity development identified this cycle for integrity-infrastructure firms in LATAM. Uncertain
Regulatory horizon
No dated horizon items this cycle. 1 item tracked without a confirmed date.
1 pending date · baseline fim-2026-07-05
Role action cards
MLRO

Brazil's central bank has cut off supervised banks from unauthorised virtual asset platforms, effective 6 November 2026.

Reportable activity and due-diligence exposure now turns on counterparty authorisation status for any relationship touching Brazilian virtual asset service providers. The underlying resolutions are not yet directly confirmed, so the mechanism should be treated as probable rather than settled.

2 evidence refs
Compliance

Brazil has introduced a phase-one authorisation deadline and a banking-counterparty prohibition for virtual asset service providers.

Obliged entities with exposure to the Brazilian market face a changed regulatory perimeter: unauthorised platforms are now outside the reach of banking-sector counterparties, which has direct implications for existing control frameworks and customer-acceptance policies touching that corridor.

2 evidence refs
Legal

Mexico's first full FATF mutual evaluation since 2018 has been adopted, with detailed ratings not yet published.

The adoption itself carries no disclosed findings yet, so liability exposure assessments tied to Mexico's anti-money-laundering standing should wait for the published ratings rather than being drawn from the adoption event alone.

1 evidence refs
Board

Brazil's crypto sector has moved under full central-bank anti-money-laundering supervision for the first time.

This is a structural market-access change for the largest crypto market in Latin America, with reputational and strategic relevance for any institution with exposure to Brazilian digital-asset counterparties or infrastructure.

2 evidence refs
CTO

Brazilian virtual asset platforms without central-bank authorisation lose banking-sector access from 6 November 2026.

Infrastructure and integration decisions involving Brazilian digital-asset counterparties now carry a binary authorisation-status dependency; platform architecture that cannot confirm counterparty authorisation status faces an operational cut-off risk.

2 evidence refs
Risk

A permissive gap in Brazil's digital-asset supervision has closed through a licensing and counterparty-access mechanism.

Exposure concentration previously tolerated under light supervision in Brazil's crypto sector is now subject to a hard banking cut-off, which should be reflected in exposure models for any counterparty network touching that market.

2 evidence refs
Operations

Screening and onboarding workflows touching Brazilian virtual asset counterparties now require authorisation-status checks.

Transaction monitoring and counterparty screening thresholds for Brazilian digital-asset relationships should account for the 6 November 2026 prohibition on dealing with unauthorised platforms.

1 evidence refs
Audit

No material change for this persona this cycle

No material change for this persona this cycle

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo LATAM-specific signal surfaced this cycle.
T2 · EU AML Package / AMLAno_changeNot applicable to the LATAM bloc (non-EEA).
T3 · FATF Grey Listmaterial_changeFour jurisdictions removed from grey list (none GAFILAT members); Mexico mutual evaluation adopted.
T4 · Beneficial-Ownership Register Statusno_changeNo LATAM development identified this cycle.
T5 · Crypto & Digital-Asset Integritymaterial_changeBrazil's BCB VASP authorisation deadline and bank-counterparty prohibition took effect.
T6 · Sanctions Regime Divergenceno_changeNo LATAM-specific divergence identified this cycle.
Registers

Enforcement actions

  • 3 Dec 2025
  • 17 Jul 2025
  • 25 Jul 2025
  • 1 May 2025
  • 30 Jun 2026
  • 1 Jul 2026
  • 14 Apr 2026
  • 30 Jun 2026
  • 31 Dec 2025
  • 3 Jul 2025
  • OFAC designated multiple individuals and a Bogotá-based entertainment company as SDGT/TCO for supporting Tren de Aragua's money-laundering operations. 3 Dec 2025
  • OFAC sanctioned senior Tren de Aragua leaders, including 'Niño Guerrero', under counter-terrorism and TCO authorities. 17 Jul 2025
  • Treasury sanctioned Venezuela's Cartel de los Soles, described as a state-linked criminal group supporting Tren de Aragua and the Sinaloa Cartel. 25 Jul 2025
  • OFAC designated CJNG leadership and complicit Mexican logistics/transport companies involved in crude-oil theft from Pemex and cross-border smuggling to the U.S. 1 May 2025
  • OFAC sanctioned two Mexican citizens and nine companies for facilitating a cartel-linked cross-border fuel-smuggling operation exploiting CNE/SENER permit gaps. 30 Jun 2026
  • OFAC designated PCC operatives and front companies for laundering over $30 million in U.S.-generated drug proceeds via cryptocurrency back to Brazil — the third OFAC action against PCC since 2021. 1 Jul 2026

Sanctions changes

  • 9 Jan 2026
  • 10 Jun 2026
  • 10 Jun 2025
  • 19 Jun 2026
  • 14 Apr 2026
  • 30 Jun 2026
  • 15 Jan 2026
  • 31 Dec 2025
  • 5 Sep 2026
  • 1 Oct 2025
  • 1 Apr 2026
  • 1 Oct 2026
  • President Trump issued E.O. 14373, 'Safeguarding Venezuelan Oil Revenue for the Good of the American and Venezuelan People,' restructuring the Venezuela oil-sanctions architecture toward a licensed-channel model routing revenue through Foreign Government Deposit Funds. 9 Jan 2026
  • Cascading Venezuela General Licenses (GL46-52 series, GL30B, GL48B, GL49A, GL50-52) issued Jan-June 2026 progressively authorized oil, gas, mineral (including gold), petrochemical and port/airport-operation transactions with Venezuela for established U.S. entities. 10 Jun 2026
  • The European Commission adopted Delegated Regulation (EU) 2025/1184 (10 June 2025) adding Venezuela (alongside Algeria, Angola, Côte d'Ivoire, Kenya, Laos, Lebanon, Monaco, Namibia, Nepal) to the EU high-risk third-country AML list, while delisting Panama, Jamaica, Barbados, Gibraltar, the Philippines, Senegal, Uganda and the UAE. 10 Jun 2025
  • HM Treasury's June 2026 Money Laundering Advisory Notice designates Bolivia, Haiti and Venezuela (among others) as MLR Regulation 33 High-Risk Third Countries, requiring enhanced due diligence, following the FATF's 19 June 2026 statements. 19 Jun 2026

Regulatory horizon (register)

  • BCB Public Consultation 124/2025 — eFX International Payment Authorisation
  • BCB Public Consultation 124/2025 — eFX International Payment Authorisation
  • FATF fifth-round mutual evaluation of Mexico - Plenary discussion and ratings publication
  • Brazil BCB VASP authorisation cut-off
  • FATF Plenary and Working Group Meetings, Paris
  • Brazil VASP (SPSAV) full authorization licensing deadline
  • FATF October 2026 Plenary — LATAM grey-list progress review
  • EU HRTC list review clause — potential Venezuela reassessment
  • Brazil CVM crypto-securities classification rulemaking

Active schemes

  • Mexican cartel crude-oil and fuel theft/smuggling TBML
  • Tren de Aragua / Cartel de los Soles state-linked laundering network
  • Venezuela oil-sector sanctions liberalisation/workaround architecture
  • Hizballah Tri-Border Area / Panama free-zone revenue network
  • Cartel/sanctions-evasion crypto inflows to Brazilian exchanges
  • PCC cross-border crypto laundering (Brazil-U.S.)
Sources
  1. Moving to a single list for UK sanctions designations, 28 January 2026 - GOV.UK
  2. https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html
  3. https://www.fatf-gafi.org/en/countries/global-network/financial-action-task-force-of-latin-america--gafilat-.html
  4. https://amluae.com/fatf-grey-list-countries-update-19th-june-2026/
  5. https://citadel365.com/blogs/fatf-june-2026-update-grey-list-and-black-list-changes/
  6. https://www.coindesk.com/policy/2026/05/02/brazil-s-central-bank-bans-stablecoin-and-crypto-settlement-in-cross-border-payments
  7. https://cryptobriefing.com/brazil-crypto-regulations-cross-border/
  8. https://www.cryptowisser.com/news/brazil-sets-2026-deadline-for-crypto-firms-to-prove-compliance-or-exit/
  9. https://facephi.com/en/compliance/by-region/latam-navigating-rapid-regulatory-modernization/
  10. https://home.treasury.gov/news/press-releases/sb0207
  11. https://www.corporatecomplianceinsights.com/state-ofac-sanctions-enforcement-2026/
  12. https://www.cmtradelaw.com/2026/04/ofac-sanctions-cartel-linked-casinos-and-financial-enablers-on-the-southern-border/
  13. https://biblioteca.gafilat.org/wp-content/uploads/2025/08/EvaluacionsectorialderiesgosdeAVyPSAVregionaldelGAFILAT.pdf
  14. https://checklynx.com/en/resources/knowledge-base/fatf-grey-list
  15. https://www.studocu.com/latam/document/universidad-nacional-autonoma-de-honduras/legislacion-bancaria-i/informe-sobre-prioridades-de-efectividad-gafilat-2025-analisis-regional-y/140183262
  16. https://www.globalsecurity.org/security/library/news/2026/09/sec-260929-treasury01.htm
  17. https://igaming-times.com/countries/mexico
  18. https://globalinitiative.net/analysis/criminal-coexistence-the-illicit-ecosystem-of-the-southern-cones-triple-border/
  19. https://www.fincen.gov/news/news-releases/fincen-issues-supplemental-alert-fuel-smuggling-and-tax-evasion-schemes-southern
  20. https://www.legalparadox.com/insights/stablecoin-regulation-in-mexico-guide-for-foreign-issuers
  21. https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html
  22. The Rio Times
  23. U.S. Treasury OFAC / Federal Register
  24. FATF
  25. JFC Attorneys
  26. The Rio Times
  27. Gaming Compliance
  28. https://www.riotimesonline.com/colombia-us-sanctions-fbi-arrival-2026/
  29. https://www.govinfo.gov/content/pkg/FR-2026-10-06/pdf/2026-20395.pdf
  30. https://www.fatf-gafi.org/en/calendars/assessments.html
  31. https://jfcattorneys.com/en/guides/argentina-crypto-license
  32. https://www.riotimesonline.com/brazil-crypto-rules-2026/
  33. https://gamingcompliance.io/curacao-gambling-licence-requirements/
  34. Olarte Moure
  35. FATF
  36. Compliance.com.co
  37. GAFILAT
  38. EU Global Threats Programme
  39. FATF
  40. FATF
  41. FATF
  42. https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-fatf-plenary-october-2026.html
  43. https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-october-2026.html
  44. "Black and grey" lists
  45. Financial Action Task Force of Latin America (GAFILAT)
  46. Jurisdictions under Increased Monitoring - 19 June 2026
  47. High-risk and other monitored jurisdictions
  48. FATF changes its grey listing criteria to further focus on risk
  49. FATF
  50. Countries / Jurisdictions
  51. Jurisdictions under Increased Monitoring - 13 February 2026
  52. Jurisdictions under Increased Monitoring - 21 February 2025
  53. Outcomes FATF Plenary, 17-19 June 2026
  54. News
  55. Outcomes of meetings
  56. Publications
  57. Jurisdictions under Increased Monitoring - 13 June 2025
  58. Jurisdictions under Increased Monitoring - 24 October 2025
  59. Money Laundering Advisory Notice: June 2026 - GOV.UK
  60. Jurisdictions under Increased Monitoring - 25 October 2024
  61. Jurisdictions under Increased Monitoring - June 2024
  62. Venezuela-Related Sanctions | Office of Foreign Assets Control
  63. Issuance of Venezuela-related General Licenses | Office of Foreign Assets Control
  64. Frequently Asked Questions - Newly Added | Office of Foreign Assets Control
  65. Venezuela Sanctions
  66. Venezuela Sanctions Regulations 31 CFR part 591 ...
  67. Issuance of Venezuela-related General License | Office of Foreign Assets Control
  68. Sanctions Programs and Country Information | Office of Foreign Assets Control
  69. 1229 | Office of Foreign Assets Control
  70. Issuance of New and Amended Venezuela-related General Licenses | Office of Foreign Assets Control
  71. OFFICE OF FOREIGN ASSETS CONTROL Venezuela ...
  72. Counter Terrorism Designations; Transnational Criminal Organizations Designations | Office of Foreign Assets Control
  73. OFAC ALERT International Cartels Designated as Foreign Terrorist
  74. Counter Terrorism Designations and Designation Update; Transnational Criminal Organizations Designations | Office of Foreign Assets Control
  75. Counter Terrorism Designation | Office of Foreign Assets Control
  76. Counter Narcotics and Counter Terrorism Designations and Designation Updates; Cyber-related Designations | Office of Foreign Assets Control
  77. Counter Narcotics and Counter Terrorism Designations | Office of Foreign Assets Control
  78. US Treasury Sanctions Venezuela’s Cartel de los Soles - Bloomberg
  79. Counter Narcotics and Counter Terrorism Designations and Designation Updates | Office of Foreign Assets Control
  80. OFAC Related Press Releases | Office of Foreign Assets Control
  81. Counter Narcotics Trafficking Sanctions | Office of Foreign Assets Control
  82. The 2026 Crypto Crime Report - Chainalysis
  83. 2026 Crypto Crime Report Introduction - Chainalysis
  84. Research Reports Archive - Chainalysis
  85. Brazil's Crypto Crime Challenge: How Global Money Laundering Networks Target Latin America's Largest Market
  86. 2026 Crypto Crime Report: Scams
  87. 2026 Crypto Crime Report – Illicit Crypto Trends & Typologies | TRM Labs
  88. OFAC Sanctions 100+ ISIS-K Crypto Addresses
  89. Crypto and Human Trafficking: 2026 Crypto Crime Report
  90. ダークネットマーケットの資金フロー 26億ドルと詐欺の構造変化
  91. ランサムウェア身代金総額8億2千万ドル 攻撃50%増の実態
  92. FinCEN Alert Hizballah Alert
  93. December 2024 Anti-money laundering and counter-terrorist financing measures
  94. Report: Hezbollah in League with Latin American Drug ...
  95. Paraguay Extradites Brazilian Money Launderer to the U.S. | OCCRP
  96. Hezbollah | OCCRP
  97. fatf REPORT TERRORIST FINANCING IN WEST AFRICA October 2013
  98. Statement by FinCEN Director Kenneth A. Blanco in Support of Yesterday’s Anti-Terrorism Financing Actions by Argentina and Its Financial Intelligence Unit | FinCEN.gov
  99. Year 2026 Version 1 – 25.11.2025 ECHO/-AM/BUD/2026/91000 1
  100. Regional risks - Paraguay travel advice - GOV.UK
  101. Country policy and information note: Organised criminal groups, Brazil, March 2025 (accessible) - GOV.UK
  102. May 2025 Mexican Cartel Crude Oil Smuggling Methodology
  103. FinCEN Issues Alert on Oil Smuggling Schemes on the U.S. Southwest Border Associated with Mexico-Based Cartels | FinCEN.gov
  104. FinCEN Supplemental Alert on Fuel Smuggling and Tax ...
  105. Counter Narcotics Designations; Counter Terrorism Designations | Office of Foreign Assets Control
  106. Oil Smuggling Schemes on the U.S. Southwest Border ...
  107. Mexican Cartel Fuel Smuggling Schemes
  108. Transnational Criminal Organizations Designations; Issuance of Amended Russia-related General Licenses; Publication of Updated Russia-related Frequently Asked Questions | Office of Foreign Assets Control
  109. US Sanctions Mexican Companies for Cartel-Linked Fuel Smuggling - Bloomberg
  110. FinCEN-Advisory-CMLN-508.pdf
  111. Anti-money laundering and countering the financing of terrorism at international level - Finance
  112. European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  113. Anti-Money Laundering and Terrorist Financing Directive 4 - Finance
  114. Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  115. EU methodology for the identification of high-risk third countries - Finance
  116. High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission
  117. UAE Off EU Watchlist, Critics Say Reforms Fall Short | OCCRP
  118. High-risk and other monitored jurisdictions
  119. Venezuela: list of designations and sanctions notices - GOV.UK
  120. Venezuela sanctions: guidance - GOV.UK
  121. Venezuela sanctions: statutory guidance - GOV.UK
  122. OFSI Consolidated List Search
  123. The UK Sanctions List - GOV.UK
  124. [Withdrawn] Financial sanctions targets by regime - GOV.UK
  125. UK sanctions relating to Venezuela - GOV.UK
  126. Starter guide to UK sanctions - GOV.UK
  127. Moving to a single list for UK sanctions designations, 28 January 2026 - GOV.UK
  128. Financial Action Task Force (FATF)
  129. FATF / GAFILAT (Argentina Mutual Evaluation Report, Dec 2024)
  130. GAFILAT
  131. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
  132. OFAC
  133. FinCEN
  134. FinCEN
  135. European Commission (DG FISMA)
  136. HM Treasury
  137. Chainalysis
  138. OCCRP
  139. Bloomberg
Coverage gaps
fim-int-2026-07-05-G001: UK MLR HRTC Advisory Notice (June 2…
fim-int-2026-07-05-G001: UK MLR HRTC Advisory Notice (June 2026) listing of Bolivia and Haiti lacks direct cross-verification against a primary UK-government consolidated list this cycle; a direct retrieval of the underlying list would upgrade this claim's confidence. [resolved]
fim-int-2026-07-05-G002: Country-level source_quality and so…
fim-int-2026-07-05-G002: Country-level source_quality and source-floor metrics (has_national_primary, floor_met) were not independently established for Venezuela, Bolivia, Haiti, Mexico, Brazil or Argentina individually; dedicated child-JID deep-dive baselines would close this gap. [resolved]
fim-int-2026-07-05-G003: No direct evidence confirms or deni…
fim-int-2026-07-05-G003: No direct evidence confirms or denies a latent PDVSA-Rosneft Russia-sanctions-evasion transit corridor through LATAM; dark-fleet/shadow-banking tracing specific to this route would resolve the uncertainty in tracker T1. [resolved]
fim-int-2026-07-05-G004: Argentina's Tri-Border-Area TF-conv…
fim-int-2026-07-05-G004: Argentina's Tri-Border-Area TF-conviction gap is evidenced only by the 2024 Mutual Evaluation Report; updated 2025-2026 FIU/court case-level data would confirm whether the prosecution gap has since narrowed. [resolved]
fim-int-2026-07-05-G005: Brazil's CVM crypto-securities clas…
fim-int-2026-07-05-G005: Brazil's CVM crypto-securities classification rulemaking outcome was not yet available this cycle; the finalized rule text is needed to assess the resulting AML/CFT regulatory perimeter. [resolved]
fim-int-2026-07-05-G006: Panama's post-delisting BO/AML refo…
fim-int-2026-07-05-G006: Panama's post-delisting BO/AML reform substance is asserted mainly via OCCRP critique rather than independent Tier-1 verification; a direct Panamanian regulatory-implementation record would strengthen or revise this Assessed-tier claim. [resolved]
fim-int-2026-08-05-G001: No LATAM beneficial-ownership regis…
fim-int-2026-08-05-G001: No LATAM beneficial-ownership registry development (Brazil CNPJ/BO, Mexico RFC beneficiary rules, Colombia RUB) was identified this cycle; T1 primary-source search on these registries was not conducted. [resolved]
fim-int-2026-08-05-G002: No LATAM-specific compliance-techno…
fim-int-2026-08-05-G002: No LATAM-specific compliance-technology (RegTech/AI transaction monitoring) development surfaced this cycle. [resolved]
fim-int-2026-08-05-G003: Tier-D mandatory jurisdictions Camb…
fim-int-2026-08-05-G003: Tier-D mandatory jurisdictions Cambodia (KH) and Laos (LA) were not searched this cycle. [resolved]
fim-int-2026-08-05-G004: No direct tier-1 OFAC statement was…
fim-int-2026-08-05-G004: No direct tier-1 OFAC statement was retrieved confirming the full post-Maduro-capture Venezuela policy posture. [resolved]
fim-int-2026-08-21-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No LATAM-specific beneficial-ownership (D2) development was identified this cycle; requires dedicated follow-up sweep. [resolved]
fim-int-2026-08-21-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No LATAM enabler-jurisdiction (D3) development was identified this cycle. [resolved]
fim-int-2026-08-21-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G003 ({'scheme': 'financial_integrity', 'value': 'D4'}): No LATAM conflict-finance (D4) development was identified this cycle. [resolved]
fim-int-2026-08-21-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G004 ({'scheme': 'financial_integrity', 'value': 'D6'}): No LATAM compliance-technology (D6) development was identified this cycle; standing row carried forward as quiet. [resolved]
fim-int-2026-08-21-G005: Tier D jurisdictions KH, LA, and CO…
fim-int-2026-08-21-G005: Tier D jurisdictions KH, LA, and CO returned no material LATAM-baseline-relevant signal this cycle and require a dedicated follow-up sweep. [resolved]
fim-int-2026-08-21-G006 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G006 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 BCB gazette text was directly retrieved this cycle for Resolutions 519-521 or 561; sourcing relies on T3/T4 secondary press. [resolved]
fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 primary BCB (Banco Central do Brasil) host page was independently reached this pass for Resolutions 519-521; only law-firm secondary summaries were retrieved. [resolved]
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): Beneficial-ownership regional finding rests on a single T4 secondary-hosted copy of a GAFILAT-derived report; no T1 GAFILAT primary host reached for this specific effectiveness-priorities document. [resolved]
fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', 'value': 'D4'}): TBML LatAm trade-triangle corridor search was actively run but returned no fresh material this cycle; standing coverage gap, not an invented finding. [resolved]
fim-int-2026-09-05-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G004 ({'scheme': 'financial_integrity', 'value': 'D1'}): Sanctions_changes dates for the three sanctions-changes entries (Venezuela SDGT, Colombia SDN, Mexico casino designations) were not independently established with precise effective dates this pass. [resolved]
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): D2 Beneficial Ownership developments across LATAM were not located this cycle; no registry-implementation news surfaced. [resolved]
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): D4 Conflict Finance developments across LATAM were not located this cycle. [resolved]
fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): No T1 primary source (DOF, gov.mx) for Acuerdo 115/2026 was directly retrieved this cycle; sourcing rests on T3 secondary commentary. [resolved]
fim-int-2026-10-11-G001: GAFILAT 2026 virtual-asset sectoral…
fim-int-2026-10-11-G001: GAFILAT 2026 virtual-asset sectoral risk assessment quote not independently re-verified this cycle. [resolved]
fim-int-2026-10-11-G002: Tier D LA (Laos) UN Panel/OFAC/OFSI…
fim-int-2026-10-11-G002: Tier D LA (Laos) UN Panel/OFAC/OFSI Yemen-Houthi channel check not resolved this cycle given pooled search budget. [resolved]
fim-int-2026-10-25-G001: Tier D jurisdiction checks for Camb…
fim-int-2026-10-25-G001: Tier D jurisdiction checks for Cambodia, Laos and Colombia were not completed this cycle due to search-budget constraints. [resolved]
fim-int-2026-10-25-G002: The standing UN Panel (Yemen) / OFA…
fim-int-2026-10-25-G002: The standing UN Panel (Yemen) / OFAC / OFSI Houthi-linked designation check required every cycle was not completed this cycle. [resolved]
fim-int-2026-10-25-G003: No D8 (Commercial Activity) bloc-le…
fim-int-2026-10-25-G003: No D8 (Commercial Activity) bloc-level finding was identified or researched to completion this cycle for LATAM. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): Cambodia and Laos Tier-D checks were not completed this cycle given LATAM-bound research scope; recorded as a gap, not a verified no-material-change finding. [open]
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): Full text of BCB Resolutions 519-521/2025 was not directly retrieved this cycle; confidence on Brazil VASP deadline capped at Probable pending T1 BCB-hosted anchor. [open]
FIM-GAP-001 (D6): FATF flags Venezuela's 2024 NPO law as inc…
FIM-GAP-001 (D6): FATF flags Venezuela's 2024 NPO law as inconsistent with the risk-based approach required under Recommendation 8, with oversight potentially disrupting legitimate NPO activity while failing to target genuine TF risk.
FIM-GAP-002 (D2): Bolivia and Haiti both lack effective sanc…
FIM-GAP-002 (D2): Bolivia and Haiti both lack effective sanctions/enforcement for beneficial-ownership breaches and timely BO information access, per their respective FATF action-plan deficiency statements.
FIM-GAP-003 (D3): Argentina's 2024 Mutual Evaluation found T…
FIM-GAP-003 (D3): Argentina's 2024 Mutual Evaluation found TF investigations mostly reactive and STR-dependent, with a lack of prosecutions and absence of TF convictions inconsistent with the country's exposure via the Tri-Border Area and Hezbollah-linked networks.
FIM-GAP-004 (D4): Despite repeated OFAC designations (May 20…
FIM-GAP-004 (D4): Despite repeated OFAC designations (May 2025, June 2026) and FinCEN alerts, cartel crude-oil and fuel theft from Pemex continues at a scale described by FinCEN as 'billions of dollars,' indicating designations have not yet disrupted the underlying complicit-broker infrastructure.
FIM-GAP-005 (D2): This baseline, scoped to the LATAM bloc as…
FIM-GAP-005 (D2): This baseline, scoped to the LATAM bloc as a single JID, cannot substitute for country-level Mutual Evaluation granularity across all ~17 GAFILAT member states within one dispatch; findings concentrate on the highest-signal nodes (Venezuela, Bolivia, Haiti, Mexico, Brazil, Argentina/TBA) identified in the research window.

Evidence

Confidence-tiered claims

OFAC designated 21 individuals and 25 entities tied to Sinaloa Cartel leadership, financial facilitators (including a Tijuana money-exchange house) and corrupt Mexican officials, under E.O. 14059 and E.O. 13224. [Source 1]
Probable · 1 source
Acuerdo 115/2026, published in the DOF on 7 August 2026, introduces risk-based AML rules for obliged entities including gambling ('actividades vulnerables'), entering force 30 November 2026, with risk assessments due 1 March 2027 and automated monitoring by 1 June 2027. [Source 1]
Probable · 1 source
GAFILAT's 2025 regional sectoral risk assessment on virtual assets and VASPs remains the standing reference across the bloc's 18 member states, identifying fraud, cyberattack and drug-trafficking-linked risk as very high for the VA/VASP sector. [Source 1]
Probable · 1 source
Ciudad del Este remains a strategic financial node where commercial companies, real estate, gambling houses and crypto-asset operations facilitate movement of illicit capital; the Argentine side of the tri-border area is an increasingly prevalent smuggling hub. [Source 1]
Probable · 1 source
FinCEN's supplemental alert on fuel-smuggling and tax-evasion schemes tied to CJNG on the Mexico-US border remains the most recent primary-adjacent TBML typology document for the corridor. [Source 1]
Probable · 1 source
Mexico's Senate is reviewing a bill (introduced 6 May 2026) to create a peso-referenced stablecoin regime (Activos Virtuales Estables), restricting issuance to Banxico-authorised IFPEs and banks. [Source 1]
Uncertain · 1 source
OFAC designated then-President Petro, his wife, son and then-Interior Minister under EO 14059 on 24 October 2025; local reporting on 3 October 2026 suggests possible further US Treasury action, unconfirmed by any US agency [Source 1]
Uncertain · 1 source
OFAC designated the individual under EO 13224 (as amended) and EO 14059 for providing financial/material/technological support to the Sinaloa Cartel; action dated 1 October 2026, published in the Federal Register 6 October 2026 [Source 1]
Probable · 1 source
FATF fifth-round mutual evaluation onsite period Feb 2026 with possible Plenary discussion in October 2026; prior 2018 evaluation placed Mexico under enhanced follow-up [Source 1]
Probable · 1 source
CNV General Resolution 1139/2026 confirms PSAV registry access depends on a substantive integrity/solvency assessment of applicants, directors and beneficial owners, rather than automatic filing acceptance [Source 1]
Probable · 1 source
Existing VASPs must file authorisation requests by 30 October 2026; from that date, BCB-authorised banks/payment institutions may not transact with unauthorised VASPs; stablecoin transfers are treated as FX operations capped at US$100,000 per transaction, monthly reporting in force since 4 May 2026 [Source 1]
Probable · 1 source
Dedicated compliance officer role, AML/CFT programme aligned to FIU Curaçao, unusual-transaction reporting via goAML under NORUT; crypto operators face on-chain transaction-monitoring expectations and anonymous crypto platforms face rejection [Source 1]
Probable · 1 source
Remains on FATF grey list per 19 June 2026 plenary; next plenary (26-30 Oct 2026, Paris) falls after this cycle's cutoff [Source 1]
Probable · 1 source
Remains on FATF grey list per 19 June 2026 plenary; also subject to comprehensive bilateral US/EU sanctions regimes distinct from FATF listing [Source 1]
Probable · 1 source
GAFILAT's 2025 regional Sectoral Risk Assessment on virtual assets and VASPs remains the operative regional reference; GAFILAT's fifth round of mutual evaluations assesses virtual-asset activity at the same level as traditional financial institutions for the first time [Source 1]
Probable · 1 source
FATF Plenary and Working Group Meetings scheduled 26-30 October 2026 in Paris; will decide grey-list/black-list changes, outcome not known within this cycle's cutoff [Source 1]
Probable · 1 source
Mexico's GAFILAT mutual evaluation: last full evaluation 2018; possible onsite period 1 Feb 2026; possible plenary discussion 1 Oct 2026, per FATF's own GAFILAT country page [Source 1]
Probable · 1 source
FATF Plenary (28-30 Oct 2026) adopted the FATF-GAFILAT mutual evaluation report of Mexico [Source 1]
Probable · 1 source
Incumbent VASPs had to file phase-1 BCB authorisation applications by 30 Oct 2026; from 6 Nov 2026 BCB-supervised banks/PIs barred from dealing with unauthorised VASPs [Source 1]
Probable · 1 source
Bulgaria, Cote d'Ivoire, DRC and Monaco removed from the FATF grey list (22 to 18); none are GAFILAT members [Source 1]
Probable · 1 source
FATF-GAFILAT mutual evaluation report adopted at 28-30 Oct 2026 FATF Plenary [Source 1]
Probable · 1 source
Incumbent VASPs active on 2 Feb 2026 had to file phase-1 authorisation applications by 30 Oct 2026 under BCB Resolutions 519-521/2025 [Source 1]
Probable · 1 source
From 6 Nov 2026, BCB-supervised banks/payment institutions barred from dealing with unauthorised VASPs [Source 1]
Probable · 1 source
Bulgaria, Cote d'Ivoire, DRC and Monaco removed from grey list (22 to 18); no additions; none GAFILAT members [Source 1]
Probable · 1 source
GAFILAT brings together 18 countries from South, Central, and North America [Source 1]
Probable · 1 source